{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"error","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"}
{"level":"debug","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}
{"level":"info","ts":"2026-07-15T14:16:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"}
{"level":"debug","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-15T14:16:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"}
{"level":"info","ts":"2026-07-15T14:16:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e33a971d-3216-439a-8b20-5c5bbc391369","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53508","PortSpecifier":{"PortValue":53508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":151611450},"http":{"id":"e33a971d-3216-439a-8b20-5c5bbc391369","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e33a971d-3216-439a-8b20-5c5bbc391369","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39648","PortSpecifier":{"PortValue":39648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39648","PortSpecifier":{"PortValue":39648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":197805664},"http":{"id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1c5f9f0-eb42-461c-9c9b-096a2a5aeba6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53522","PortSpecifier":{"PortValue":53522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53522","PortSpecifier":{"PortValue":53522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124990,"nanos":248977061},"http":{"id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0de8ba60-dff7-4f7a-874b-8ab80d95ed55","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53538","PortSpecifier":{"PortValue":53538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124991,"nanos":313013216},"http":{"id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1ea4725-4258-4376-b1a2-45f8f2fc684b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ea9683-917f-4c94-9720-910995e44808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4ea9683-917f-4c94-9720-910995e44808","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ea9683-917f-4c94-9720-910995e44808","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784124992,"nanos":355856444},"http":{"id":"a4ea9683-917f-4c94-9720-910995e44808","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-642G1mwnTM3nFbwP_ENSB45cQoxrB97v9lMrtZfKY7BOJRercvRHeML0pcgY\"}"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","subscription":"e2e-rate-iso-a-8c380b","tenant":"e2e-shared-a-2723e9","userId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-8c380b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4ea9683-917f-4c94-9720-910995e44808","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8c380b"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ea9683-917f-4c94-9720-910995e44808","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8d146d7d-667e-467f-a1e2-bb2cf1045e9c","keyName":"e2e-rate-a-8c380b","selected_subscription":"e2e-rate-iso-a-8c380b","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-8c380b@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8c380b","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ea9683-917f-4c94-9720-910995e44808","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ea9683-917f-4c94-9720-910995e44808","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59e82e2b-3f96-4137-854a-7f2833af6426","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45162","PortSpecifier":{"PortValue":45162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":360804135},"http":{"id":"59e82e2b-3f96-4137-854a-7f2833af6426","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59e82e2b-3f96-4137-854a-7f2833af6426","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e2394bc-1034-4616-bef8-cabd923965d6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":409691003},"http":{"id":"9e2394bc-1034-4616-bef8-cabd923965d6","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"]}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1aa8eda4e980"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6662a338-e456-488d-8970-2d47aeede02a"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"34acd1b1-d11c-4700-9be9-1507d93f5695","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e2394bc-1034-4616-bef8-cabd923965d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45172","PortSpecifier":{"PortValue":45172}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125006,"nanos":457290380},"http":{"id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c5ee6e0-6c26-43c6-bcbe-82f5b9e270a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45188","PortSpecifier":{"PortValue":45188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125007,"nanos":497110256},"http":{"id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0db7ef3c-439a-47b8-b24b-56b716ba759f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03dd007c-285b-451a-b0c3-066ca4147138","method":"POST","path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions","host":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:45204","PortSpecifier":{"PortValue":45204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125008,"nanos":540463464},"http":{"id":"03dd007c-285b-451a-b0c3-066ca4147138","method":"POST","headers":{":authority":"e2e-shared-a-2723e9.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-r6r6kk7mVKSyjg7A_PxJYkdy7gUsM8kWEY1R9CCL1w3Z4YIxYCR1KpcNbDWf\"}"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","subscription":"e2e-rate-iso-a-00d403","tenant":"e2e-shared-a-2723e9","userId":"5b7fe071-4954-4c24-a038-dba25559f58b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\",\"requestedSubscription\":\"e2e-rate-iso-a-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2723e9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03dd007c-285b-451a-b0c3-066ca4147138","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2723e9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-00d403"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03dd007c-285b-451a-b0c3-066ca4147138","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5b7fe071-4954-4c24-a038-dba25559f58b","keyName":"e2e-rate-a-00d403","selected_subscription":"e2e-rate-iso-a-00d403","selected_subscription_key":"ai-tenant-e2e-shared-a-2723e9/e2e-rate-iso-a-00d403@ai-tenant-e2e-shared-a-2723e9/rate-test-model-2723e9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2723e9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-00d403","namespace":"ai-tenant-e2e-shared-a-2723e9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03dd007c-285b-451a-b0c3-066ca4147138","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03dd007c-285b-451a-b0c3-066ca4147138","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49522","PortSpecifier":{"PortValue":49522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","method":"POST","path":"/ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40/v1/completions","host":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:49522","PortSpecifier":{"PortValue":49522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784125008,"nanos":576465280},"http":{"id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","method":"POST","headers":{":authority":"e2e-shared-b-bfdd40.apps.600a666a-195b-47df-b3f9-1aa8eda4e980.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KNs8Dd5MfeqRL4Dt_a5fUuHASw8IpeRFZ766VP3IFLdBfZwCZgpFDi0qHTLy"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KNs8Dd5MfeqRL4Dt_a5fUuHASw8IpeRFZ766VP3IFLdBfZwCZgpFDi0qHTLy\"}"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","keyName":"e2e-rate-b-00d403","subscription":"e2e-rate-iso-b-00d403","tenant":"e2e-shared-b-bfdd40","userId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\",\"requestedSubscription\":\"e2e-rate-iso-b-00d403\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bfdd40.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bfdd40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00d403","namespace":"ai-tenant-e2e-shared-b-bfdd40","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bfdd40/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-00d403"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b5eb6f8-1da7-42d7-a63f-97199e89b586","keyName":"e2e-rate-b-00d403","selected_subscription":"e2e-rate-iso-b-00d403","selected_subscription_key":"ai-tenant-e2e-shared-b-bfdd40/e2e-rate-iso-b-00d403@ai-tenant-e2e-shared-b-bfdd40/rate-test-model-bfdd40","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bfdd40","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-00d403","namespace":"ai-tenant-e2e-shared-b-bfdd40","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-15T14:16:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a9b447-7a84-4ba1-a8e7-f8b1d0819682","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-15T14:16:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c4e4e9699a87e9ef835d46b3b36fd50fd3e35342be318b87c5b1dc8ff50e7c"}
{"level":"info","ts":"2026-07-15T14:16:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f230fc3442a176708db750afd04a52e5dba760f5776040f0e8b60ca86a57df9"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95501a656d1aee514bb342890d56077a3f5d50eae70581b6e2ffa1293b5d71e0"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06b8811ef5f6053af0dc45b62b5734093cf5c13e941c8ae9536cdf49286ea009"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e5fea50a9f57d2e539d50869753f7f14d50d5437825c4f10bd3af1f031fc02d3"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/610a4bd3a1df453036132868f64bba613843bca8521c205fa99a9044b0f05207"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/37ff2eb7d1808abf0dd31168586383fb10b39d67a308fb992f2e3652d68a6878"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7270cc37a983e412d6b303c56db94b34fa7b6daa290547a549634ffff3e81959"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f46a4fcb9a5ed8d773595e3237f2963753da010dae35cc71c5f80b30b664c54e"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d59ebd2512ae28d9e88788d625639e0881fb901de02ab81c6bc2cad65165faee"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91c45c7c1b952cbf304c2476c5a472a8ee739cc6175626c6216a1284250210bd"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28aa865198b5033eb2156a1797fbfb1e76bcc540d61ba4c44b9901dde7c84b62"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314fd55798e1006baeeda28a2be85dd1396a2eb1821a804e740b3d5dd56cb2d4"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb504ade6ea538c835385419dd575f5fef736947228dc911ca30f2183adff60b"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0b30ccee7f232da4f67b2952bfd96256d8b8b0cd6bc98813931c4e08314c88"}
{"level":"info","ts":"2026-07-15T14:16:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd6565f39e2a640ab9cf3f30411e59d15d46ff620350f431aa286f7783860b14"}
{"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2535aaf092aa6a5180be482c651366ddd6d080fcfe691c11d5a94d5412eda107"}
{"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15889e9fa52af83bc9c03a0ab288dc073230e512a9c05ce8e3de2bb5d4475714"}
{"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4b001d2f6b7ec72656d6779fb80c388420599e54613eabdc6603bdc1fa34926"}
{"level":"info","ts":"2026-07-15T14:17:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b17c6fbaa2515ff97f3a2cbe3ff5f7ab2c48295e7120c7dd303b25c8bf4f65"}
{"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4973306b384733a61a9112bc9e26aa87b36772d6e8b6618ba867f9564843f4d"}
{"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea58aa547ef6b9aaa6b708b0990053957ad167a9bd03fde3a00755e162d31a0e"}
{"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16157c6d5824de47fcec7555dfa9e39a2617c27f18aee04c681c33bae7cc0cb8"}
{"level":"info","ts":"2026-07-15T14:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cce43372bf171bff8212f08dec42f9c1d068749c6aaeab7009979674946cfffe"}