{"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c97101"}
{"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:24:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a947ae6-d7f4-403c-a291-e84406783b03","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c014f029bd221da15ec954a4f5a0f69aba5b7d1216507787b6905ef731ff215"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17116ee24609288803998c6c7286129dd64bebc047c9d29f431211684e283625"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f8b553bff07f64cf5c066e5b917e725877c25113999fed20ae0b032df5c7271"}
{"level":"info","ts":"2026-07-18T17:24:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e282d5a644cba50a26757fee2bd85faafd4b2f4a8daba4f1edb86171fc174e"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a308c06619b88014342d5e31c2fdd5bc331c96f7224f5f9d50bc0fb194f6a8ce"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/067d4eb0919195807c996cd7d2a1d2c436fb60d6b843fc649b7ec5097a591ac2"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8fe1f0074091d4476c9d0cdef210c678dea2850cddb9b5b0e0405256b63a46a"}
{"level":"info","ts":"2026-07-18T17:24:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/204688c86718d36be4c020b69aef1496396eb1a0cb425f719468b2f9d613f8be"}
{"level":"info","ts":"2026-07-18T17:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f16474fc63eee461fd57a552fa9b8d6ea39b61825fd637fd55ab392846ecfb77"}
{"level":"info","ts":"2026-07-18T17:24:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/396f2ac7e57e386353ac14e93e44bf55ebaa23c330ef08bbf9bae423c9acbaa3"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cc40fc42e5ca46b4aef101e22ec2455e872b0eb6b6821b18ae0c3e69a75472"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa8461f25ffb323f1e10b382f6de0e52765d1698b8e96dcb8be38be15f055f2"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77adaddda22bbd4b3708a1080d8f15186449d207733819b59acbd9fc046e5aa0"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86d39625ca338ecb8918bb786c949b4b1855b4922bdd330a29b1150c3099a6c4"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a89e498b1a0238180adfd7933935d4a23625d79f7fd777c6d44b54556f5ba26c"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"info","ts":"2026-07-18T17:24:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41d5f22e86e31b445a00fc9e48d273ce757f7dfe5d37d5f39725e3b256badbfe"}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"error","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"info","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-18T17:25:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"error","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-18T17:25:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36028","PortSpecifier":{"PortValue":36028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":493613346},"http":{"id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b033f62f-4deb-4e63-a19c-5de96cf918d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a898ebd0-9013-4019-8378-2fb99ad68db8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:53632","PortSpecifier":{"PortValue":53632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":539734516},"http":{"id":"a898ebd0-9013-4019-8378-2fb99ad68db8","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a898ebd0-9013-4019-8378-2fb99ad68db8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36030","PortSpecifier":{"PortValue":36030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395532,"nanos":580203604},"http":{"id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4659bbbc-0eb6-4d2e-a86e-3f9632aaab92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36042","PortSpecifier":{"PortValue":36042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36042","PortSpecifier":{"PortValue":36042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395533,"nanos":645101148},"http":{"id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3966de29-1c27-489e-b0f2-e06cbbba7e93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36058","PortSpecifier":{"PortValue":36058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395534,"nanos":683204835},"http":{"id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LNQ8eNUSqOrRY3UU_eOAAZ5E6YVMFHa4Svzs6RzOcPombHu2ugDNxvA4w0gW\"}"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","subscription":"e2e-rate-iso-a-992623","tenant":"e2e-shared-a-78538d","userId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-992623\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-992623"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"39da57b0-7915-4a35-832f-4a770a3fe9d8","keyName":"e2e-rate-a-992623","selected_subscription":"e2e-rate-iso-a-992623","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-992623@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-992623","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aac9a04-978d-40fc-b9d1-491419fe4d2c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59878","PortSpecifier":{"PortValue":59878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59878","PortSpecifier":{"PortValue":59878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":549959376},"http":{"id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7c3d3f4-9a5f-483d-99ff-70b1075562a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf26d123-7637-495a-94e0-917a3d5235a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51590","PortSpecifier":{"PortValue":51590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":586840710},"http":{"id":"cf26d123-7637-495a-94e0-917a3d5235a3","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"]}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ee2580b4b8e8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6e438633-d12a-44b1-b014-279cffb6963d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f1b895b9-520b-4c73-9653-1fa79c8c3661","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf26d123-7637-495a-94e0-917a3d5235a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59884","PortSpecifier":{"PortValue":59884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59884","PortSpecifier":{"PortValue":59884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395547,"nanos":622508796},"http":{"id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed5130a7-a75f-4ec8-972e-e22e1bc0e0f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59888","PortSpecifier":{"PortValue":59888}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395548,"nanos":661692871},"http":{"id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df16df8-2b0f-48ce-b9e4-64a0b9777142","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","method":"POST","path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions","host":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:59894","PortSpecifier":{"PortValue":59894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395549,"nanos":698539759},"http":{"id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","method":"POST","headers":{":authority":"e2e-shared-a-78538d.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WtRUhF0c21m64aMq_vIUjMo6iVJhAocWkjFQ82J71D53JN79QOEsKooRCrWs\"}"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","subscription":"e2e-rate-iso-a-c698e2","tenant":"e2e-shared-a-78538d","userId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\",\"requestedSubscription\":\"e2e-rate-iso-a-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-78538d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-78538d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c698e2"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"52b7e62d-7d25-4dce-a481-a7905ccd040c","keyName":"e2e-rate-a-c698e2","selected_subscription":"e2e-rate-iso-a-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-a-78538d/e2e-rate-iso-a-c698e2@ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-78538d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c698e2","namespace":"ai-tenant-e2e-shared-a-78538d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-78538d/rate-test-model-78538d"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c644f0e2-301a-47f9-ae72-4433d1a6f4d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a865cf3b-7f13-4536-8161-b58bb1191964","method":"POST","path":"/ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21/v1/completions","host":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:51606","PortSpecifier":{"PortValue":51606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784395549,"nanos":732681524},"http":{"id":"a865cf3b-7f13-4536-8161-b58bb1191964","method":"POST","headers":{":authority":"e2e-shared-b-497f21.apps.895c59d4-5776-4983-8d76-ee2580b4b8e8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13xGAdkP4llIh9V6p_6GU6tqSl8bGzRubyFJ8FhDATq26qXFzU5JM17Aesv6J"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13xGAdkP4llIh9V6p_6GU6tqSl8bGzRubyFJ8FhDATq26qXFzU5JM17Aesv6J\"}"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","keyName":"e2e-rate-b-c698e2","subscription":"e2e-rate-iso-b-c698e2","tenant":"e2e-shared-b-497f21","userId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\",\"requestedSubscription\":\"e2e-rate-iso-b-c698e2\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497f21.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-497f21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c698e2","namespace":"ai-tenant-e2e-shared-b-497f21","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21"}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-497f21/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c698e2"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e5f15615-8d9a-4726-aa28-bd86d0dc189f","keyName":"e2e-rate-b-c698e2","selected_subscription":"e2e-rate-iso-b-c698e2","selected_subscription_key":"ai-tenant-e2e-shared-b-497f21/e2e-rate-iso-b-c698e2@ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-497f21","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c698e2","namespace":"ai-tenant-e2e-shared-b-497f21","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-497f21/rate-test-model-497f21"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-18T17:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a865cf3b-7f13-4536-8161-b58bb1191964","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00da27777581d4c8435848043bc93d90a9fc2159cae93fd3893ddfcac5211202"}
{"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/258603dc92ec5bf95a356bb8bc84fda1969d1e56273b46ff66d51020ec4d5fb3"}
{"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35640a6b18905e179655de22366eb97d353b00ef9ab2cde60a14cd98109ee1a4"}
{"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99ffcb5d12592d01495504ba76e208b1ef8c9acbb38a0f84473b0a36cccb4827"}
{"level":"info","ts":"2026-07-18T17:25:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/970d0bf55ef1001616bca803cad8a27b1d07c2f5842ecf0d6c58cc34cf2e48a4"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/455374c27d9f1fcaf34c0dba17245c7e0a1c4ac81254cef154bee3a2c2e086ef"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08e466dca46125e5191076d01e332c228b75ff374520dcc9456bf770e9e550c0"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06b53039ab0ca0c20f0b6df937434eb6528cfe7172679e2ef7b973025182c5c5"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d32968ea6736064f54bdce5e6a5717ab2487de54745c9083ab155b897a88884"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ca6ea61fb2fa5c186063adf891df2f98bcf97bcd3e30cb990527787db2a218"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24738226eaaa8affe2828d75b719849d4e90faca7793443ec3ee72361e0a0f8"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/175e4cdc26d29960ce6d8bc2fba411fcbffab1591b5450037d0d5fa45b78d0bd"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a70d9f48c87ea8b30ba1bffa31e30cfe89cdb23282fa47a30b38b5257e030173"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeec35435dae4d11ef4448e7497f2507b94c577c6d026a60914fe8dd7dfc631a"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bdde9dbbe634215d8040405a0c1403dbd270010373b9158acd5c3fed658afe2"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/773c816ec8afc043553846f347cb0a50dd079d4b8ef6feec5399412f57cb8557"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7302e627c677cf40b2435ef7e7edb86c522f082bc7d6066de4328a5b923fcf5c"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f750141328196ac788f42b6513d38861fec75aecfd4e8f883b5a6cc1e38c4d0b"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18136a7ea3224fd4fe8d635f843eeb7edcb7aef1c349914ac7d6844a9ff43eff"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a86fa054434b3912857b415491467c796a24b2ea33671ec3f61208a063bb3fbf"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1177dc7782f076fcc0473ac42a995614a705b31b86ce24edab3e4c2e7e951df0"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/319f7a57db3730e6ce65097705196fc174d7885777ceb595a5b12681fd290412"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/015c9cc290ecdf7de3c9b108b2aaa2d0b8827bc03e39b8977906d9b41479d386"}
{"level":"info","ts":"2026-07-18T17:25:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab43823010c10cebabc0c4e4dcc942ff542d4524afa0ea0323a7c515a8329a3b"}