{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:26:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:26:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"}
{"level":"info","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"}
{"level":"debug","ts":"2026-07-14T20:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T20:27:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"}
{"level":"error","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"}
{"level":"info","ts":"2026-07-14T20:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37338","PortSpecifier":{"PortValue":37338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99a8d2af-406a-401e-9485-cacd98d715cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37338","PortSpecifier":{"PortValue":37338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":407837471},"http":{"id":"99a8d2af-406a-401e-9485-cacd98d715cd","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a8d2af-406a-401e-9485-cacd98d715cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43072","PortSpecifier":{"PortValue":43072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:43072","PortSpecifier":{"PortValue":43072}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":454196177},"http":{"id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bbdeb34-ad13-4f85-88d3-e11357ad0e7b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37346","PortSpecifier":{"PortValue":37346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37346","PortSpecifier":{"PortValue":37346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060831,"nanos":495242629},"http":{"id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2589d17-7ea2-43b0-add0-8c7e2922b5d3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37362","PortSpecifier":{"PortValue":37362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060832,"nanos":559684994},"http":{"id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c6f0c37-8701-4a9c-ac06-60fe5208efe5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060833,"nanos":597092916},"http":{"id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-X2RAGKzOmfNqv6uu_yYWFLKUiFAKDuPuLMmm1WCLg70mM1XrdiuA0KOyCKrm\"}"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","subscription":"e2e-rate-iso-a-464aa6","tenant":"e2e-shared-a-76db83","userId":"1a05a913-baae-4bc5-9582-53201336fe7a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-464aa6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-464aa6"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1a05a913-baae-4bc5-9582-53201336fe7a","keyName":"e2e-rate-a-464aa6","selected_subscription":"e2e-rate-iso-a-464aa6","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-464aa6@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-464aa6","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e709005-ee4d-4956-b382-8cdf2348d6b4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":595585350},"http":{"id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.43:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8961063b-16c1-4c46-9a0a-8fe50b8fe7e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60928d84-213c-4053-b033-4cc22e50cfcc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41838","PortSpecifier":{"PortValue":41838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":635451652},"http":{"id":"60928d84-213c-4053-b033-4cc22e50cfcc","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"]}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f51ff4616134"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10e4cf38-4c6b-49fd-94e4-421e73bde9fc"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"49ca3997-2250-49c1-a4df-f91ee4d9d217","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60928d84-213c-4053-b033-4cc22e50cfcc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37758","PortSpecifier":{"PortValue":37758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37758","PortSpecifier":{"PortValue":37758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060846,"nanos":674558132},"http":{"id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c369f0-592e-4f5b-a211-ce3a1fce297c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37768","PortSpecifier":{"PortValue":37768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060847,"nanos":718298698},"http":{"id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b0d64ef-a1e2-4197-8d1f-3c1109cb9cfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","method":"POST","path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions","host":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:37778","PortSpecifier":{"PortValue":37778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.43:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":757034764},"http":{"id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","method":"POST","headers":{":authority":"e2e-shared-a-76db83.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XpZGnyYHSle4QooG_CjUTfeuwOxnXlwHWTfDU8fUdRIgdugJvhfwCQOUXZw7\"}"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","subscription":"e2e-rate-iso-a-a3b3bf","tenant":"e2e-shared-a-76db83","userId":"be98f049-da1b-49d7-b782-0c71f1391ad7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\",\"requestedSubscription\":\"e2e-rate-iso-a-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-76db83.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-76db83/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a3b3bf"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"be98f049-da1b-49d7-b782-0c71f1391ad7","keyName":"e2e-rate-a-a3b3bf","selected_subscription":"e2e-rate-iso-a-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-a-76db83/e2e-rate-iso-a-a3b3bf@ai-tenant-e2e-shared-a-76db83/rate-test-model-76db83","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-76db83","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a3b3bf","namespace":"ai-tenant-e2e-shared-a-76db83","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ebe41f-51e2-43be-95f5-2838f2bd9d8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd330425-8094-4871-90d8-564c36ef4955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41854","PortSpecifier":{"PortValue":41854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd330425-8094-4871-90d8-564c36ef4955","method":"POST","path":"/ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d/v1/completions","host":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd330425-8094-4871-90d8-564c36ef4955","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41854","PortSpecifier":{"PortValue":41854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784060848,"nanos":795953034},"http":{"id":"cd330425-8094-4871-90d8-564c36ef4955","method":"POST","headers":{":authority":"e2e-shared-b-ecc78d.apps.f432e014-de42-4e5c-8c87-f51ff4616134.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AdPekHCIM2kjBeA1_NWRmqLElfLfdnQ3JS9NdRO643Jlr3Y7wVtr2DUoh0NV"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AdPekHCIM2kjBeA1_NWRmqLElfLfdnQ3JS9NdRO643Jlr3Y7wVtr2DUoh0NV\"}"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","keyName":"e2e-rate-b-a3b3bf","subscription":"e2e-rate-iso-b-a3b3bf","tenant":"e2e-shared-b-ecc78d","userId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\",\"requestedSubscription\":\"e2e-rate-iso-b-a3b3bf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ecc78d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ecc78d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3b3bf","namespace":"ai-tenant-e2e-shared-b-ecc78d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd330425-8094-4871-90d8-564c36ef4955","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-ecc78d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a3b3bf"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd330425-8094-4871-90d8-564c36ef4955","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5d5f238f-46ad-4ff4-95e0-0a2a1df699d4","keyName":"e2e-rate-b-a3b3bf","selected_subscription":"e2e-rate-iso-b-a3b3bf","selected_subscription_key":"ai-tenant-e2e-shared-b-ecc78d/e2e-rate-iso-b-a3b3bf@ai-tenant-e2e-shared-b-ecc78d/rate-test-model-ecc78d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ecc78d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a3b3bf","namespace":"ai-tenant-e2e-shared-b-ecc78d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd330425-8094-4871-90d8-564c36ef4955","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T20:27:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd330425-8094-4871-90d8-564c36ef4955","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c13cb999f540a85cc0a9b45a3aef54bcf27d670c3afc49ee0ae95fb9cee0f5cc"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db139fbec380c8cc7d32154fd39330700ee9c020a31c9b5652130cec85a68368"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c550c519aa2c8212b5d633772ee32c4726a2caf5dda7735a74a1dde21b30adff"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1b8032d6980d238bbfd03ec7275d9abac854a2f2db003f3b28140b3299cb58b"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2038c67495b7cae4a744546f2212afd3463b916b7f7aaeb29cba469857bfabe"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ecfe0723855c4bf3615f2cd4f20a118c20cee4a28ab2e1509093dc6a61fe594"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f507079541e8389d6122335071e7f9d21cb19719105f1c9e0325d0941f7e5b8"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c29396c245f70b5c749d303d18dd9b8546c1142241ed5ba58c2bea431af23552"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6f2248de1ab1ef405c3d1f9f94f30e6863f415d866cb453b4a13c085df9e42e"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9fbd0307114c9cbaad76ac7a8dfa807ad766fe8de6b44a13912bd7c27af06c0"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00b07e527b7d2acf37bbb66b06bfe2ffa02131122ff5b9d3a2ad293273d971cb"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3068e2153b64b51eb3ef81ac4bfe59c2985a5fd92a636b18321da620b2776fdc"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6377c4ef2594a1d85536d259240266a16e018edc77e2d6aa57c01f878b968e01"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/570326af879efadf5a2a64fb1c07473224d090176f66c70a74ff7f76a2d2de28"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a5f1a7a4b5b713c9ca3e43cf9562cd702115c5a182e40862afb54235f76a4cc"}
{"level":"info","ts":"2026-07-14T20:27:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a621e94fde00d5580e2a472cff5d3cc17cf80643dfa78aeee2ca1127b6d51ae7"}
{"level":"info","ts":"2026-07-14T20:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afb2a2e890ccefdfc43eb784d4154488aaadb1c588f04f5da050d5d9203adcbd"}
{"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbfa9dd5bf131c862db8cc4af053a3ae56f7ae1be83edce9e8cdede1ab5526f0"}
{"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fef5f539b37e4ed510c125799947d892a376acd90ebba131ba48acc58ad39f1"}
{"level":"info","ts":"2026-07-14T20:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c28b37ed679c5b23f59474eb4c452cbeaa570eb67fa3779e7aac7c34b6b82c5"}
{"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae277ecbc8c578edfe4f058b16407d98618208bc9007af82891c1c45fb9f5693"}
{"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/850c6f9b19f2e6867c79d7d9d65046a38257222772e1ba471177620d907bc3db"}
{"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c9b65c949e1d48a6b1cfa1a7568066a47ced899e0af888985cf621659bb51ad"}
{"level":"info","ts":"2026-07-14T20:28:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97590f5cd28ec35ed98f78ac959e5d16f8e7df75ca6a5d12abd046201c08d912"}