--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6e48ba250dedfb5eea4feb0637213005663e2d567c209fccefae5c3281d4cf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb8942c66597dd3de6fce06cdc419c12f794ec274bced5af38d997e63d9d2b21"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6e48ba250dedfb5eea4feb0637213005663e2d567c209fccefae5c3281d4cf0"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9"}
{"level":"error","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9"}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"error","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"error","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:34:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"info","ts":"2026-07-14T14:34:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46828","PortSpecifier":{"PortValue":46828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3d18791-ce9f-4976-888b-04901eb72bb9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46828","PortSpecifier":{"PortValue":46828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039682,"nanos":849084146},"http":{"id":"e3d18791-ce9f-4976-888b-04901eb72bb9","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3d18791-ce9f-4976-888b-04901eb72bb9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45408","PortSpecifier":{"PortValue":45408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45408","PortSpecifier":{"PortValue":45408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039682,"nanos":914010378},"http":{"id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5598c9e0-9c11-452b-a6d4-d166be9afcee","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46836","PortSpecifier":{"PortValue":46836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8b10444-9871-4467-8669-5a4efd1cb751","method":"GET","path":"/maas-api/v1/api-keys/9cb5f793-24ed-44dd-832e-e3279b44de82","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:46836","PortSpecifier":{"PortValue":46836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039682,"nanos":978990359},"http":{"id":"d8b10444-9871-4467-8669-5a4efd1cb751","method":"GET","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cb5f793-24ed-44dd-832e-e3279b44de82",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9cb5f793-24ed-44dd-832e-e3279b44de82",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:34:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8b10444-9871-4467-8669-5a4efd1cb751","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45420","PortSpecifier":{"PortValue":45420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","method":"GET","path":"/maas-api/v1/api-keys/c5e451c5-fc09-4d6c-a915-cb9fa5b15b73","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45420","PortSpecifier":{"PortValue":45420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039683,"nanos":18700230},"http":{"id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","method":"GET","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5e451c5-fc09-4d6c-a915-cb9fa5b15b73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c5e451c5-fc09-4d6c-a915-cb9fa5b15b73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:34:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a940c6f6-0b64-4c4b-adc4-3eaa2c5d5bfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54622","PortSpecifier":{"PortValue":54622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc338db7-af15-4413-a1d5-0ced774b065d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54622","PortSpecifier":{"PortValue":54622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039700,"nanos":543190318},"http":{"id":"cc338db7-af15-4413-a1d5-0ced774b065d","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc338db7-af15-4413-a1d5-0ced774b065d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60502","PortSpecifier":{"PortValue":60502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60502","PortSpecifier":{"PortValue":60502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039700,"nanos":592859886},"http":{"id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5fee14c-6676-402b-b586-5ebb7ffef53f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54626","PortSpecifier":{"PortValue":54626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54626","PortSpecifier":{"PortValue":54626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039700,"nanos":645445563},"http":{"id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","method":"GET","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bg6XDLTRXZQbSYdS_2E9E47Ew40mjnZQGDC6g8ziJh8xUrb0onUTcOtROs9D"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bg6XDLTRXZQbSYdS_2E9E47Ew40mjnZQGDC6g8ziJh8xUrb0onUTcOtROs9D\"}"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"62c16a60-21aa-4cf9-bbc2-05097960da3d","keyName":"e2e-auth-iso-a-c2718f","subscription":"e2e-auth-iso-559a49","tenant":"e2e-shared-a-8442f2","userId":"62c16a60-21aa-4cf9-bbc2-05097960da3d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-559a49"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12f09df8-4ece-49dd-b3d7-1e91469c3075","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98528802-4cac-408d-abeb-2ec273a0ec9f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:58152","PortSpecifier":{"PortValue":58152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039719,"nanos":589685167},"http":{"id":"98528802-4cac-408d-abeb-2ec273a0ec9f","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98528802-4cac-408d-abeb-2ec273a0ec9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38290","PortSpecifier":{"PortValue":38290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c69e7c15-b85e-4321-b81c-968da958ea06","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38290","PortSpecifier":{"PortValue":38290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039719,"nanos":629374246},"http":{"id":"c69e7c15-b85e-4321-b81c-968da958ea06","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69e7c15-b85e-4321-b81c-968da958ea06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38306","PortSpecifier":{"PortValue":38306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0fe38e47-f075-4a04-b185-57b0b7b69653","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:38306","PortSpecifier":{"PortValue":38306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039719,"nanos":674363506},"http":{"id":"0fe38e47-f075-4a04-b185-57b0b7b69653","method":"GET","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Gpe8sLNBTv8igs9F_5LwWdyAxOZ7MdZcFbvuzZjgZCaYIaCnEXAdAmzCxB7b"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Gpe8sLNBTv8igs9F_5LwWdyAxOZ7MdZcFbvuzZjgZCaYIaCnEXAdAmzCxB7b\"}"}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T14:35:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0fe38e47-f075-4a04-b185-57b0b7b69653","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37940","PortSpecifier":{"PortValue":37940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37940","PortSpecifier":{"PortValue":37940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039744,"nanos":495578521},"http":{"id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5f46edfc-2d85-445a-b4dd-2b70c278031f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36332","PortSpecifier":{"PortValue":36332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c10d774f-2b09-47b2-ac82-904245ffaa13","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36332","PortSpecifier":{"PortValue":36332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039744,"nanos":540110233},"http":{"id":"c10d774f-2b09-47b2-ac82-904245ffaa13","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c10d774f-2b09-47b2-ac82-904245ffaa13","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37952","PortSpecifier":{"PortValue":37952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbc33d64-e99a-492c-b263-3eef51e5c509","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:37952","PortSpecifier":{"PortValue":37952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039744,"nanos":580391628},"http":{"id":"bbc33d64-e99a-492c-b263-3eef51e5c509","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbc33d64-e99a-492c-b263-3eef51e5c509","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36346","PortSpecifier":{"PortValue":36346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:36346","PortSpecifier":{"PortValue":36346}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039744,"nanos":619251331},"http":{"id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:35:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6d6d0d5-6c79-4d26-9762-4364628dcc3e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45662","PortSpecifier":{"PortValue":45662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45662","PortSpecifier":{"PortValue":45662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039762,"nanos":27784639},"http":{"id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40a4ed4d-dfd4-413e-b7f1-404eea07effc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49844","PortSpecifier":{"PortValue":49844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90ff9a34-649f-4acf-b757-05d87697ecf8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49844","PortSpecifier":{"PortValue":49844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039762,"nanos":69881794},"http":{"id":"90ff9a34-649f-4acf-b757-05d87697ecf8","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90ff9a34-649f-4acf-b757-05d87697ecf8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49854","PortSpecifier":{"PortValue":49854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","method":"GET","path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49854","PortSpecifier":{"PortValue":49854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039762,"nanos":112743951},"http":{"id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","method":"GET","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51b23039-e68a-4cf9-a99c-c52cb4b5450b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","method":"GET","path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:45676","PortSpecifier":{"PortValue":45676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039762,"nanos":148581463},"http":{"id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","method":"GET","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/687b27e0-bfa7-4a7c-95b8-76ab8ae56907",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ceae3d1b-9743-4929-9f01-20b020db3fcd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60716","PortSpecifier":{"PortValue":60716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60716","PortSpecifier":{"PortValue":60716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039781,"nanos":632922678},"http":{"id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5239c6f5-b146-4574-b616-a8b64b5f3acb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1d99495-4ce2-4751-910c-a56f503665ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:52594","PortSpecifier":{"PortValue":52594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039781,"nanos":677458772},"http":{"id":"e1d99495-4ce2-4751-910c-a56f503665ae","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/auth-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1d99495-4ce2-4751-910c-a56f503665ae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60728","PortSpecifier":{"PortValue":60728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77f7eb2b-3767-4992-853b-e85806713c4a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:60728","PortSpecifier":{"PortValue":60728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039781,"nanos":717425115},"http":{"id":"77f7eb2b-3767-4992-853b-e85806713c4a","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bDptD9TYlRibaLM7_3cGWZtnVfNhea4zju0RwggqDqW7zRXtfeTVzXPsKs9t"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bDptD9TYlRibaLM7_3cGWZtnVfNhea4zju0RwggqDqW7zRXtfeTVzXPsKs9t\"}"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ae7a10a4-043e-4335-8ea7-e14f8e2c0a10","keyName":"e2e-auth-iso-a-0ab271","subscription":"e2e-auth-iso-49933e","tenant":"e2e-shared-a-8442f2","userId":"ae7a10a4-043e-4335-8ea7-e14f8e2c0a10","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/auth-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-49933e"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77f7eb2b-3767-4992-853b-e85806713c4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af7f644dccc747b6e89673e5bde2ace2f20efb0a11c44902b1073f617bd9161c"}
{"level":"info","ts":"2026-07-14T14:36:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e23b99f493cd25e295b2f5335de26718ccc814879d65bd5d6d8197f13148e229"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0755c0e292a17613363683443c0dd98c46e65450e9c15a5b3ff92527a5893252"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32431676543b9e8686cb52d40275ea4dc62b5c725f8757e2ecaf4d8b076bbbd5"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11f6da98f361d5e2465c24be80afb09f520b949c8153e53358acd21216c4f8ae"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbc03ff33eba7a335779e0f5575f0db8f926ac2b92c885de2d3498916cc49211"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a287291a6587db42848b744cdc398a404e2f3df09e0bd81c8b3808ccfd476a51"}
{"level":"info","ts":"2026-07-14T14:36:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ef144ade391111ad979c70d0877c0210346ef4a863954c189bba688940fd57b"}
{"level":"debug","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"info","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"debug","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ae130a43f913d42ae45fb498980fd45ccb3eab53fff90e8210221aef0e193a8"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/227f8153965150807db5642f397126d65aeb90bfc64e0ce433158dfa6d1e18f9"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"info","ts":"2026-07-14T14:36:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/857f1ebb950438b8fda09324290e221dad59b1210e7c64d7c5ddbd0e0835bcef"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6e48ba250dedfb5eea4feb0637213005663e2d567c209fccefae5c3281d4cf0"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa689d123a1120f866660b84f5a44f665778dfa3e5a15de3ece391b7a0e48bd4"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c18114c0822c4cc971d9c0bb835d91005a218c741a9bf4682eaa2db6a7f5d99a"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b381a2ad36ad7fd93cd27bd994c7924ad9539904aaf0403fc983b0730fbce2c1"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb8942c66597dd3de6fce06cdc419c12f794ec274bced5af38d997e63d9d2b21"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"debug","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"}
{"level":"info","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"}
{"level":"debug","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"error","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"error","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:36:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:36:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a96843ac3d23be05a951e39360eb168c2ecf8f8b1a03e23fa8a299bc64354","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a96843ac3d23be05a951e39360eb168c2ecf8f8b1a03e23fa8a299bc64354"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"error","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"error","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d08e5139f05f6d4b25a9b21ae064aec2f09faa39df56fb27bdae83a7eab912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"debug","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d08e5139f05f6d4b25a9b21ae064aec2f09faa39df56fb27bdae83a7eab912"}
{"level":"info","ts":"2026-07-14T14:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:37:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"info","ts":"2026-07-14T14:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53884","PortSpecifier":{"PortValue":53884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53884","PortSpecifier":{"PortValue":53884}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039834,"nanos":990725659},"http":{"id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/sub-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58a19e34-ed9c-4afe-b691-0d48ddc276c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aa41461-051d-41e5-a8ce-52bccf47390e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49970","PortSpecifier":{"PortValue":49970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039835,"nanos":45024666},"http":{"id":"6aa41461-051d-41e5-a8ce-52bccf47390e","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/sub-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aa41461-051d-41e5-a8ce-52bccf47390e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53890","PortSpecifier":{"PortValue":53890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ca12f20-daa9-4352-946b-c425c95ab92c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53890","PortSpecifier":{"PortValue":53890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039835,"nanos":85584124},"http":{"id":"1ca12f20-daa9-4352-946b-c425c95ab92c","method":"GET","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zmjRuZelRAlxV8rj_kIguZHIa8qqJNBbNY3rYUGe72J5775mfWWCsPMiBmyP"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zmjRuZelRAlxV8rj_kIguZHIa8qqJNBbNY3rYUGe72J5775mfWWCsPMiBmyP\"}"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46e5de75-2af8-4214-85a0-873527562158","keyName":"e2e-sub-iso-be3f2c","subscription":"e2e-a-only-8603a5","tenant":"e2e-shared-a-8442f2","userId":"46e5de75-2af8-4214-85a0-873527562158","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/sub-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-8603a5"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ca12f20-daa9-4352-946b-c425c95ab92c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:49972","PortSpecifier":{"PortValue":49972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039835,"nanos":115963621},"http":{"id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","method":"GET","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BnIC38BUebTI2Vzy_mMu0Dtef08RcWrDBMY94AKZVuT9yr3g24LHs0HC09y0"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BnIC38BUebTI2Vzy_mMu0Dtef08RcWrDBMY94AKZVuT9yr3g24LHs0HC09y0\"}"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"104030d2-24b5-43ea-a1d0-f12915d92397","keyName":"e2e-sub-iso-1eaa8a","subscription":"e2e-b-only-8603a5","tenant":"e2e-shared-b-f8f81e","userId":"104030d2-24b5-43ea-a1d0-f12915d92397","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/sub-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-8603a5"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b5286b4-05a5-434e-9934-6ce36a3d585e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41164","PortSpecifier":{"PortValue":41164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2502dba7-116d-40ea-b352-7f7231d8d626","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41164","PortSpecifier":{"PortValue":41164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039847,"nanos":632716458},"http":{"id":"2502dba7-116d-40ea-b352-7f7231d8d626","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/sub-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2502dba7-116d-40ea-b352-7f7231d8d626","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42920","PortSpecifier":{"PortValue":42920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2cf591c-b317-4bb4-81f1-b06e36828974","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42920","PortSpecifier":{"PortValue":42920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039847,"nanos":675739006},"http":{"id":"f2cf591c-b317-4bb4-81f1-b06e36828974","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/sub-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2cf591c-b317-4bb4-81f1-b06e36828974","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41178","PortSpecifier":{"PortValue":41178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"304b539e-9b37-4b27-9a25-6c80916143a9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:41178","PortSpecifier":{"PortValue":41178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039847,"nanos":713681096},"http":{"id":"304b539e-9b37-4b27-9a25-6c80916143a9","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12WE8kbcVFOSKR9J5_jyhGYpw6Q6DmfoUjLiZJ4ykQUKGc83ajHzy80AOkZq6"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12WE8kbcVFOSKR9J5_jyhGYpw6Q6DmfoUjLiZJ4ykQUKGc83ajHzy80AOkZq6\"}"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d6e8d185-c91f-4736-972c-698393847f40","keyName":"e2e-sub-iso-e03c9f","subscription":"e2e-shared-sub-ef0e18","tenant":"e2e-shared-a-8442f2","userId":"d6e8d185-c91f-4736-972c-698393847f40","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/sub-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ef0e18"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"304b539e-9b37-4b27-9a25-6c80916143a9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42928","PortSpecifier":{"PortValue":42928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"537b9e7e-8c52-45a9-a050-89beac610dc2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:42928","PortSpecifier":{"PortValue":42928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039847,"nanos":743607924},"http":{"id":"537b9e7e-8c52-45a9-a050-89beac610dc2","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DGFEBMIfEQX81fwD_IAWYHp54ZrsZVBasUHkR6FVH3yFQG1J9NeVYNpatUbl"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DGFEBMIfEQX81fwD_IAWYHp54ZrsZVBasUHkR6FVH3yFQG1J9NeVYNpatUbl\"}"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2cd0204-cceb-42ca-b6d7-5b927ee2847a","keyName":"e2e-sub-iso-6653be","subscription":"e2e-shared-sub-ef0e18","tenant":"e2e-shared-b-f8f81e","userId":"d2cd0204-cceb-42ca-b6d7-5b927ee2847a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/sub-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-ef0e18"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:37:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"537b9e7e-8c52-45a9-a050-89beac610dc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb7442ca3e0697261cd039311c767dae643c98ab67f16de1d7b6a23616a147e8"}
{"level":"info","ts":"2026-07-14T14:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e62f011842c3e9b0de7b60897000e0ceccbecbe3332e3f4be7078f0a80355e"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09324ec0a3f15361196f6cb75bd6bc0f0122dc11a8a90cfe39da929028c76151"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/475b4c379b2dd4043aa6d7c5f22c437a84f8d1aff6c1d4d50f595cb35e42f288"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54dc18b4a146bf42340b3ac257edcc75a940cf69ebfc44ffaa4ca0ee6e18fc38"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e134bc9156281f5ddb77aa97ae36bc7eeb5c3aba648fb18bc715c30a1c333010"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9729466a5d1ac998673d0df1b1bd6e6b8e3bcbed709df0a1edd75a4a53765cd"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52115c2c842748ac8f4eec905710e9400edd971ea31ccdfcd9c7f00810a392ce"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672bad5adcedbdbb0afe03735d3d6fa1440424dab7fb23ed8a02bf0ca2a0aff7"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26ff92ec97233652eee516c8c69b1eb73d6e374ddfb3a0fa3048dab2064d946a"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c98b1049d1dd675c0110364529208a0798a9c02ccbeefb31eb5fc12a3b5817d"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c80cf63256205f093ab04705b3a0bb4b3e9356035ccc757a8fbda8c466f8ffd"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0818a0034a0fbf2480c601fa29ffc102dbd788fef5486dcd600759a6b7c2315e"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca922c9929addd113cd03cc74940298f7889e284e78f79c0658041e9c14a70e6"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a949e56116995231ef65de917c6204c7254b122a17384a966613ec67251fdff"}
{"level":"info","ts":"2026-07-14T14:37:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ccb14c69814466c804e8a4bc6c7f6ca69126421e718da9be35ea331279aa15"}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:37:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"error","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"error","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T14:38:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5d08e5139f05f6d4b25a9b21ae064aec2f09faa39df56fb27bdae83a7eab912","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd1a96843ac3d23be05a951e39360eb168c2ecf8f8b1a03e23fa8a299bc64354","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5d08e5139f05f6d4b25a9b21ae064aec2f09faa39df56fb27bdae83a7eab912"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"debug","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd1a96843ac3d23be05a951e39360eb168c2ecf8f8b1a03e23fa8a299bc64354"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"info","ts":"2026-07-14T14:38:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34724","PortSpecifier":{"PortValue":34724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039911,"nanos":747208530},"http":{"id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e51cc8c-e49e-47d7-b0f7-be7cfed27e60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44528","PortSpecifier":{"PortValue":44528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5028076-2964-4093-abd0-ffc0aacc8443","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:44528","PortSpecifier":{"PortValue":44528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039911,"nanos":801579688},"http":{"id":"a5028076-2964-4093-abd0-ffc0aacc8443","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5028076-2964-4093-abd0-ffc0aacc8443","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34728","PortSpecifier":{"PortValue":34728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54b30949-1efc-4d09-babe-8f52d420bc4c","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34728","PortSpecifier":{"PortValue":34728}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039911,"nanos":864748853},"http":{"id":"54b30949-1efc-4d09-babe-8f52d420bc4c","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54b30949-1efc-4d09-babe-8f52d420bc4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34744","PortSpecifier":{"PortValue":34744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34744","PortSpecifier":{"PortValue":34744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039912,"nanos":924528728},"http":{"id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fd010dc-3581-41a9-b616-e1dea5f6826d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34752","PortSpecifier":{"PortValue":34752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06436183-3ed5-49ae-8a77-6c982efe6d87","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34752","PortSpecifier":{"PortValue":34752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039913,"nanos":963605354},"http":{"id":"06436183-3ed5-49ae-8a77-6c982efe6d87","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06436183-3ed5-49ae-8a77-6c982efe6d87","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b29319-d87e-45cf-99fe-73b2c1030603","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34768","PortSpecifier":{"PortValue":34768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039915,"nanos":491181},"http":{"id":"f0b29319-d87e-45cf-99fe-73b2c1030603","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b29319-d87e-45cf-99fe-73b2c1030603","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86916872-07fe-46d7-b556-92b3d74466b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34784","PortSpecifier":{"PortValue":34784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86916872-07fe-46d7-b556-92b3d74466b3","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86916872-07fe-46d7-b556-92b3d74466b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34784","PortSpecifier":{"PortValue":34784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039916,"nanos":40852529},"http":{"id":"86916872-07fe-46d7-b556-92b3d74466b3","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86916872-07fe-46d7-b556-92b3d74466b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86916872-07fe-46d7-b556-92b3d74466b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86916872-07fe-46d7-b556-92b3d74466b3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86916872-07fe-46d7-b556-92b3d74466b3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34786","PortSpecifier":{"PortValue":34786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7952758-961d-4f9e-a1c6-51d9b1277057","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34786","PortSpecifier":{"PortValue":34786}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039917,"nanos":80748131},"http":{"id":"f7952758-961d-4f9e-a1c6-51d9b1277057","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7952758-961d-4f9e-a1c6-51d9b1277057","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34802","PortSpecifier":{"PortValue":34802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e246052-86aa-4ba3-aaad-490949ce32ca","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34802","PortSpecifier":{"PortValue":34802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039918,"nanos":118456599},"http":{"id":"9e246052-86aa-4ba3-aaad-490949ce32ca","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e246052-86aa-4ba3-aaad-490949ce32ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34812","PortSpecifier":{"PortValue":34812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cfccb7e-997f-4543-b178-22d3041ce26a","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34812","PortSpecifier":{"PortValue":34812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039919,"nanos":160423989},"http":{"id":"0cfccb7e-997f-4543-b178-22d3041ce26a","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cfccb7e-997f-4543-b178-22d3041ce26a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34822","PortSpecifier":{"PortValue":34822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91bf22ff-f763-4150-806c-4315c2d1c229","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:34822","PortSpecifier":{"PortValue":34822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039920,"nanos":196229998},"http":{"id":"91bf22ff-f763-4150-806c-4315c2d1c229","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91bf22ff-f763-4150-806c-4315c2d1c229","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35350","PortSpecifier":{"PortValue":35350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35350","PortSpecifier":{"PortValue":35350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039921,"nanos":246017679},"http":{"id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d65bafa3-d369-4e25-acc9-f779fe9783e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35366","PortSpecifier":{"PortValue":35366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:35366","PortSpecifier":{"PortValue":35366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039922,"nanos":287345377},"http":{"id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8oalYCYCPIrxXOzj_FFq3URWJcpuFjG7ncJUiIZNRJE9zXBszJlDVBttx3h7\"}"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","subscription":"e2e-rate-iso-a-152792","tenant":"e2e-shared-a-8442f2","userId":"d7a19557-38c0-4402-a839-a95a41d1536f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-152792\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-152792"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d7a19557-38c0-4402-a839-a95a41d1536f","keyName":"e2e-rate-a-152792","selected_subscription":"e2e-rate-iso-a-152792","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-152792@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-152792","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91a87673-3d21-4ccd-9017-748f1a2c28f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3707504-e295-4829-8ba6-508f11bd72e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53044","PortSpecifier":{"PortValue":53044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039931,"nanos":204887559},"http":{"id":"e3707504-e295-4829-8ba6-508f11bd72e5","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3707504-e295-4829-8ba6-508f11bd72e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03c0a14d-cd95-488e-a03f-2115f79035aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54694","PortSpecifier":{"PortValue":54694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039931,"nanos":249670456},"http":{"id":"03c0a14d-cd95-488e-a03f-2115f79035aa","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"f61b082d-dfd5-43f3-989e-d05902e01343","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"]}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/65a9b54ce21c"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f60cccb0-6c6b-4590-924d-57d22aafc60c"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"f61b082d-dfd5-43f3-989e-d05902e01343","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03c0a14d-cd95-488e-a03f-2115f79035aa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53060","PortSpecifier":{"PortValue":53060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"632e5396-f9a6-427a-92cc-4df41cbd001e","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53060","PortSpecifier":{"PortValue":53060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039931,"nanos":284622543},"http":{"id":"632e5396-f9a6-427a-92cc-4df41cbd001e","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"632e5396-f9a6-427a-92cc-4df41cbd001e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53068","PortSpecifier":{"PortValue":53068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53068","PortSpecifier":{"PortValue":53068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039932,"nanos":347058013},"http":{"id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3462bcf-61e3-4f71-9b05-b7ec1bf1827e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53084","PortSpecifier":{"PortValue":53084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53084","PortSpecifier":{"PortValue":53084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039933,"nanos":397400561},"http":{"id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6dfde9ae-ed9d-4874-bd9f-fb7ef210cae7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53092","PortSpecifier":{"PortValue":53092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b890d16-227c-4a77-a24a-62f02a1290d7","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53092","PortSpecifier":{"PortValue":53092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039934,"nanos":434212682},"http":{"id":"5b890d16-227c-4a77-a24a-62f02a1290d7","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b890d16-227c-4a77-a24a-62f02a1290d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53100","PortSpecifier":{"PortValue":53100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53100","PortSpecifier":{"PortValue":53100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039935,"nanos":474460107},"http":{"id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f647e2c7-359a-41c5-a45e-484270dbd2bd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53102","PortSpecifier":{"PortValue":53102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53102","PortSpecifier":{"PortValue":53102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039936,"nanos":522589083},"http":{"id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62a52f5b-c2d8-4865-bd07-c63810f61fb0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53116","PortSpecifier":{"PortValue":53116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53116","PortSpecifier":{"PortValue":53116}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039937,"nanos":561351276},"http":{"id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"994095d5-6a77-4af4-8e0b-77bbe61a5b70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53120","PortSpecifier":{"PortValue":53120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53120","PortSpecifier":{"PortValue":53120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039938,"nanos":600675154},"http":{"id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6cd659a-cc98-428c-b56d-c4169fc26a3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53124","PortSpecifier":{"PortValue":53124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53124","PortSpecifier":{"PortValue":53124}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039939,"nanos":638385008},"http":{"id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:38:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02aadc67-2814-4bc3-97e9-a2078b9b6b90","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53130","PortSpecifier":{"PortValue":53130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","method":"POST","path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions","host":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:53130","PortSpecifier":{"PortValue":53130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039940,"nanos":681898177},"http":{"id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","method":"POST","headers":{":authority":"e2e-shared-a-8442f2.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qet2K111hMI3HjP5_pEF5q17NaAZ9GgTFIUCpQfvzzEyF5YrUEjIa1LMwDfR\"}"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","subscription":"e2e-rate-iso-a-4b13f9","tenant":"e2e-shared-a-8442f2","userId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\",\"requestedSubscription\":\"e2e-rate-iso-a-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8442f2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-8442f2/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c3e35c2-1a91-48b2-b256-002a03c07c23","keyName":"e2e-rate-a-4b13f9","selected_subscription":"e2e-rate-iso-a-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-a-8442f2/e2e-rate-iso-a-4b13f9@ai-tenant-e2e-shared-a-8442f2/rate-test-model-8442f2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8442f2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4b13f9","namespace":"ai-tenant-e2e-shared-a-8442f2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"600bd3c7-d72d-4ae6-a6f0-cc6e298f5637","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3479194-c1b7-4e36-9eea-931b6dada367","method":"POST","path":"/ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e/v1/completions","host":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.13:54702","PortSpecifier":{"PortValue":54702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784039940,"nanos":740721656},"http":{"id":"b3479194-c1b7-4e36-9eea-931b6dada367","method":"POST","headers":{":authority":"e2e-shared-b-f8f81e.apps.dd9d6126-2103-4067-bfcb-65a9b54ce21c.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RXXRrbPcc2XYnyDK_G83Xoa9wAyYNO6ge82Ofc90U4TQojcNBmzRq43vqGKR"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RXXRrbPcc2XYnyDK_G83Xoa9wAyYNO6ge82Ofc90U4TQojcNBmzRq43vqGKR\"}"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5839c3e-1bcc-4b63-997e-ed8568f28c85","keyName":"e2e-rate-b-4b13f9","subscription":"e2e-rate-iso-b-4b13f9","tenant":"e2e-shared-b-f8f81e","userId":"c5839c3e-1bcc-4b63-997e-ed8568f28c85","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e\",\"requestedSubscription\":\"e2e-rate-iso-b-4b13f9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f8f81e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f8f81e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4b13f9","namespace":"ai-tenant-e2e-shared-b-f8f81e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f8f81e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4b13f9"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c5839c3e-1bcc-4b63-997e-ed8568f28c85","keyName":"e2e-rate-b-4b13f9","selected_subscription":"e2e-rate-iso-b-4b13f9","selected_subscription_key":"ai-tenant-e2e-shared-b-f8f81e/e2e-rate-iso-b-4b13f9@ai-tenant-e2e-shared-b-f8f81e/rate-test-model-f8f81e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f8f81e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4b13f9","namespace":"ai-tenant-e2e-shared-b-f8f81e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T14:39:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3479194-c1b7-4e36-9eea-931b6dada367","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T14:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e03efe38798796711abc864778b01055ffda75d62ad02e539b4d8de49181043"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0e6d7236e0be3a42992259f0a03f2dd6321f54f718ed5c6f098001470a55a97"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/10954dda0fb70486a51b9b4910b03cc3a56aef1820dd64c3f69121efe162f5e4"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d296e3e4cf2e87bd7059bc40584bc2247fa64a0d26cab80b15fe648130f09acc"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c9ad5ee101909de2adc676bba26ae67775d5e9e7127e3269fe79d03a807fd5b"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/094510494d7caf433920f29a0330acf598fa452f709feed986324ed6e890a53c"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69e78be2d9d1ab531b397f50660ffb24b1f2f801b09b2a395900d6ad33c93637"}
{"level":"info","ts":"2026-07-14T14:39:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e6ad9d490dcd8e3b4714a7c9829a582e9edb0797cea46a0185730a61c91926"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7d92603951bc6119d9e1233229e97d3c15bcb6f7db0be4f444c3d3cb3f64352"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aebe9498561ca5332e1efcca81a096844e528a75c11ec9d91884e299b69c55a4"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/875e872ba3c852be3df6294ca1aab4844f2bfa0fa12420654a36470557312af7"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b3245d498ac2c215b65e99d27a099fc323fd23abe19a99a7fd7b78c609de3021"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/325fd5a45bf0c37746cc0bfb6580db2576ee085318bcb3171807f975c1cfadc5"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73e69c2455ce4b899cd25e18692117bb537a9e9a263492536ea7472aa5fdaa91"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cb15ddc2b3fc6c7229894a41fc72a84c27c3b1ca44fffa81999c75f7ec6df22"}
{"level":"info","ts":"2026-07-14T14:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97d8a986a1f36d2c9d70faf8c55b45141fe691f273f965b26dd7a504a75780e9"}
{"level":"info","ts":"2026-07-14T14:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5d08e5139f05f6d4b25a9b21ae064aec2f09faa39df56fb27bdae83a7eab912"}
{"level":"info","ts":"2026-07-14T14:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd1a96843ac3d23be05a951e39360eb168c2ecf8f8b1a03e23fa8a299bc64354"}
{"level":"info","ts":"2026-07-14T14:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbdbd5aa1b919985e447ece3303413dc26151acf3f244b3462b6ea862b3d3968"}
{"level":"info","ts":"2026-07-14T14:39:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e68fac53ae40530cec2caddb661a9b0b07da0699ec15d6c461ca602d92af4943"}
{"level":"info","ts":"2026-07-14T14:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca5c3e93e7ad2e57d078282c6991a368fc2db7efbcfcac6f212ff88b9dbb689c"}
{"level":"info","ts":"2026-07-14T14:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8cd1ff4f774d2a5f11d2209a21ae29adeb83c047d4f478bfd78f604725f8ec4"}
{"level":"info","ts":"2026-07-14T14:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95f215820b0caa307c8e4aa64730562f3168e38c696151615873203a0390d66a"}
{"level":"info","ts":"2026-07-14T14:40:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/971824d4c761c1f804e7d36b3c0330e565476ba6494a980c11ac326ac06fb364"}