{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T15:14:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"error","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:14:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48616","PortSpecifier":{"PortValue":48616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d50981d5-3498-99ef-95b2-e8e25c505d89","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48616","PortSpecifier":{"PortValue":48616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":856780441},"http":{"id":"d50981d5-3498-99ef-95b2-e8e25c505d89","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d50981d5-3498-99ef-95b2-e8e25c505d89","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def0fdac-800d-4be1-b992-10b9430567b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"def0fdac-800d-4be1-b992-10b9430567b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"def0fdac-800d-4be1-b992-10b9430567b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37008","PortSpecifier":{"PortValue":37008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":893813522},"http":{"id":"def0fdac-800d-4be1-b992-10b9430567b5","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"def0fdac-800d-4be1-b992-10b9430567b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"def0fdac-800d-4be1-b992-10b9430567b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"def0fdac-800d-4be1-b992-10b9430567b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"def0fdac-800d-4be1-b992-10b9430567b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48630","PortSpecifier":{"PortValue":48630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48630","PortSpecifier":{"PortValue":48630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696485,"nanos":938112542},"http":{"id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb65ea95-d95a-4236-92a2-c5dfed1d83b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48640","PortSpecifier":{"PortValue":48640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40426548-7702-4b43-b519-b2c381ee1a55","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48640","PortSpecifier":{"PortValue":48640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696486,"nanos":994254882},"http":{"id":"40426548-7702-4b43-b519-b2c381ee1a55","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40426548-7702-4b43-b519-b2c381ee1a55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40426548-7702-4b43-b519-b2c381ee1a55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40426548-7702-4b43-b519-b2c381ee1a55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40426548-7702-4b43-b519-b2c381ee1a55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:47470","PortSpecifier":{"PortValue":47470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696488,"nanos":29720400},"http":{"id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gq4Kh6vtakvqptiL_Vft0h4vwfPyOWfzWS2XIwWuDNHjUfJkWb0VKPdmLhoz\"}"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","subscription":"e2e-rate-iso-a-2e54f9","tenant":"e2e-shared-a-7b13c8","userId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-2e54f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2e54f9"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4f7b0efe-f96c-40a6-9c50-97d91cec5520","keyName":"e2e-rate-a-2e54f9","selected_subscription":"e2e-rate-iso-a-2e54f9","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-2e54f9@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2e54f9","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:14:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9d270a0c-b619-432b-9671-4e612b3e3e8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43592","PortSpecifier":{"PortValue":43592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":826664472},"http":{"id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a38f3451-2eca-446e-b424-f8cde2f8d58b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57386","PortSpecifier":{"PortValue":57386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70409935-92e6-42ff-b2f3-2c5906cb7629","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57386","PortSpecifier":{"PortValue":57386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":865449484},"http":{"id":"70409935-92e6-42ff-b2f3-2c5906cb7629","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"]}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a61e04b78d18"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=91091102-ccc1-4c3f-b4ad-c4ce50342f0d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d500ebb3-3cdd-4006-b02f-3662e82208ee","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70409935-92e6-42ff-b2f3-2c5906cb7629","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fec2228-0091-4743-9239-68d181355423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43600","PortSpecifier":{"PortValue":43600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fec2228-0091-4743-9239-68d181355423","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fec2228-0091-4743-9239-68d181355423","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43600","PortSpecifier":{"PortValue":43600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696500,"nanos":899437685},"http":{"id":"1fec2228-0091-4743-9239-68d181355423","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fec2228-0091-4743-9239-68d181355423","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1fec2228-0091-4743-9239-68d181355423","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fec2228-0091-4743-9239-68d181355423","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fec2228-0091-4743-9239-68d181355423","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fec2228-0091-4743-9239-68d181355423","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fec2228-0091-4743-9239-68d181355423","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43602","PortSpecifier":{"PortValue":43602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43602","PortSpecifier":{"PortValue":43602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696501,"nanos":983936187},"http":{"id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24bcd1a8-e717-43d4-939f-6e510a8a5059","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43618","PortSpecifier":{"PortValue":43618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b9f007e-bf44-45de-9f29-3a80d926a524","method":"POST","path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions","host":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:43618","PortSpecifier":{"PortValue":43618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696503,"nanos":32111244},"http":{"id":"2b9f007e-bf44-45de-9f29-3a80d926a524","method":"POST","headers":{":authority":"e2e-shared-a-7b13c8.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-PV0hOb6YpICJfZbB_Wf9wzMLXcWN7YuI5s8l1wk8MfOXgTamxLhyM8WXQNJv\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","subscription":"e2e-rate-iso-a-329124","tenant":"e2e-shared-a-7b13c8","userId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\",\"requestedSubscription\":\"e2e-rate-iso-a-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7b13c8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-329124"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7ac8ad55-0f34-4821-9abd-a951f8f41f00","keyName":"e2e-rate-a-329124","selected_subscription":"e2e-rate-iso-a-329124","selected_subscription_key":"ai-tenant-e2e-shared-a-7b13c8/e2e-rate-iso-a-329124@ai-tenant-e2e-shared-a-7b13c8/rate-test-model-7b13c8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7b13c8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-329124","namespace":"ai-tenant-e2e-shared-a-7b13c8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b9f007e-bf44-45de-9f29-3a80d926a524","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29623118-c9be-4cc7-88e5-d076597652a2","method":"POST","path":"/ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1/v1/completions","host":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:57402","PortSpecifier":{"PortValue":57402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783696503,"nanos":62968817},"http":{"id":"29623118-c9be-4cc7-88e5-d076597652a2","method":"POST","headers":{":authority":"e2e-shared-b-e538f1.apps.52b49ab1-8bd4-4d5c-b0cf-a61e04b78d18.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Wi6sxFIYkXDTtAFn_FEGmvcJ8bvK5wd2vDA14Muarb0CyCsDljZpZ0b7AWuk"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Wi6sxFIYkXDTtAFn_FEGmvcJ8bvK5wd2vDA14Muarb0CyCsDljZpZ0b7AWuk\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f766078f-38cd-475f-b6eb-81e684909e74","keyName":"e2e-rate-b-329124","subscription":"e2e-rate-iso-b-329124","tenant":"e2e-shared-b-e538f1","userId":"f766078f-38cd-475f-b6eb-81e684909e74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\",\"requestedSubscription\":\"e2e-rate-iso-b-329124\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-e538f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-e538f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329124","namespace":"ai-tenant-e2e-shared-b-e538f1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29623118-c9be-4cc7-88e5-d076597652a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-329124"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29623118-c9be-4cc7-88e5-d076597652a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f766078f-38cd-475f-b6eb-81e684909e74","keyName":"e2e-rate-b-329124","selected_subscription":"e2e-rate-iso-b-329124","selected_subscription_key":"ai-tenant-e2e-shared-b-e538f1/e2e-rate-iso-b-329124@ai-tenant-e2e-shared-b-e538f1/rate-test-model-e538f1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-e538f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-329124","namespace":"ai-tenant-e2e-shared-b-e538f1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29623118-c9be-4cc7-88e5-d076597652a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T15:15:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29623118-c9be-4cc7-88e5-d076597652a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13c7096b6709aa05514366d3a95d040f131fd12cd9da07837dd6e0dca4a7d727"}
{"level":"info","ts":"2026-07-10T15:15:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a63f9f805228d0ee83af51e68e827f64224a04f6b568dafe0255f6ae654698"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55cb2484b2112abd8cf61eb9b6a8ad07a7f47d37e141d7388b75fccf2c66f73c"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e1e84ccb3e2461d4e70d59603ce5bdfd70d3b94f6e9d1476e0ab753edef96ea"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9b8fb3995af03116eb1351dbc7496a19fadfd4ebe9379299ea4f5bd2ba2cfc"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7116c34b89056e48a1666897b1ee21523ec68c2e719b2efb49e9c1a8a6987015"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/084bdc6d0b0006847165bd6cffa8768d67d2500bc7949ce744614ce0799d8ba9"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/977f5556e565d90b41ab6bfa66425059b26101eb0aeb0fe20cacdc5ecf5a1982"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b5e98080da2b89bbe6066a1d4d738ec99025d93ce0758abb60938d8ae206ec6"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a9696a7416536808b880d29da97831df0ef225153486ffa6d1c9af74b875467"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03bb1227f726f66240a87d08775c473fa8098ebb44d36550950873715ce0e521"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f7fa8719d95618b9e5128c699a9303e7b63fdb3c876f061192b5dd11f745c49"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7779401a91a45b299146a88a9de23a887165b1bb36d702e2c2052a92b783904"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96d0f5dc3eeee101c9b566abe09838a8864799e4d6328a7d93d4475a5e5aa5f9"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22e5fdb2e9ad2be709740add5e67dcce8c8e406c4db590df39f815c0d2fd6762"}
{"level":"info","ts":"2026-07-10T15:15:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0d5f6c22eb3f62b7eba684dc8ea826d54c13ed8111e2f3e6370b2354c894112"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc9e5ebc3b8af41c1bc3bd5bbc44babefd5b21c4038c3b97f4964872a436387"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ffb0f7fe0b587dbc2f491dca70002bfcf29937ecea196bac5c0fe0575097e79"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1682797bb59e13a2f8b2693b955b541414f0fcf589cd7aa3e995e55287e604a"}
{"level":"info","ts":"2026-07-10T15:15:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9426e24f4668e24029ddfa94bc12e3c63dcc329cfbcbc53c23b00be3f0a0e87f"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad98b6570a5a82806246ca4acd2084f56154a8a708046c6be62438779f6bb48a"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc586afa76b448551e22e45a12fe93e8acff29f532cdcd6e08a1aa2f3c091887"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/398017271b953777a3dc9b2e2d6e034cea1cbd3aaafc344328c2f7b08ac6c6fc"}
{"level":"info","ts":"2026-07-10T15:15:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/404f3fcd9fd37569cfc645117ae2c7a882e2f1b221148d7e77a85fcc2ff6252f"}