--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25380759a04bfb96e199bc16055e04e0e08caf94cda478926c8f6f111d4adc89"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126"}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:35:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:35:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df74fdc-a896-4583-94da-020c90398011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52492","PortSpecifier":{"PortValue":52492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0df74fdc-a896-4583-94da-020c90398011","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0df74fdc-a896-4583-94da-020c90398011","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52492","PortSpecifier":{"PortValue":52492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726517,"nanos":857705155},"http":{"id":"0df74fdc-a896-4583-94da-020c90398011","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0df74fdc-a896-4583-94da-020c90398011","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0df74fdc-a896-4583-94da-020c90398011","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0df74fdc-a896-4583-94da-020c90398011","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df74fdc-a896-4583-94da-020c90398011","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0df74fdc-a896-4583-94da-020c90398011","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40914","PortSpecifier":{"PortValue":40914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40914","PortSpecifier":{"PortValue":40914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726517,"nanos":919451162},"http":{"id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6041629-e4b0-4a06-acc9-9f973e96e7f3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","method":"GET","path":"/maas-api/v1/api-keys/4356f8f5-083e-4dd1-b968-a132132c40f7","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52508","PortSpecifier":{"PortValue":52508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726517,"nanos":988193143},"http":{"id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","method":"GET","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4356f8f5-083e-4dd1-b968-a132132c40f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4356f8f5-083e-4dd1-b968-a132132c40f7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc42335c-6a3c-4d7f-8e9c-39f96f0d1852","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40930","PortSpecifier":{"PortValue":40930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","method":"GET","path":"/maas-api/v1/api-keys/e92f6408-5e9e-4d00-b5ed-32abf62b0074","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40930","PortSpecifier":{"PortValue":40930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726518,"nanos":29810208},"http":{"id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","method":"GET","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92f6408-5e9e-4d00-b5ed-32abf62b0074",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e92f6408-5e9e-4d00-b5ed-32abf62b0074",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71a6dcb8-d9cb-443c-81cb-ab867388fc7d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"585e325a-d647-475f-92bc-5de8753a8612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35732","PortSpecifier":{"PortValue":35732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"585e325a-d647-475f-92bc-5de8753a8612","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"585e325a-d647-475f-92bc-5de8753a8612","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35732","PortSpecifier":{"PortValue":35732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726535,"nanos":309611864},"http":{"id":"585e325a-d647-475f-92bc-5de8753a8612","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"585e325a-d647-475f-92bc-5de8753a8612","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"585e325a-d647-475f-92bc-5de8753a8612","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"585e325a-d647-475f-92bc-5de8753a8612","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"585e325a-d647-475f-92bc-5de8753a8612","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"585e325a-d647-475f-92bc-5de8753a8612","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39894","PortSpecifier":{"PortValue":39894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a69822ab-85a6-4d27-b241-f6ed44d94818","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:39894","PortSpecifier":{"PortValue":39894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726535,"nanos":354906066},"http":{"id":"a69822ab-85a6-4d27-b241-f6ed44d94818","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a69822ab-85a6-4d27-b241-f6ed44d94818","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:35744","PortSpecifier":{"PortValue":35744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726535,"nanos":401065944},"http":{"id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","method":"GET","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Rduxj26vhUw9PjeN_hwKhqIXBGK549OYIOXj0kB1VYY3SwX8gLKl28h3TtoW"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Rduxj26vhUw9PjeN_hwKhqIXBGK549OYIOXj0kB1VYY3SwX8gLKl28h3TtoW\"}"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b61f96ba-443d-46b5-8058-5a84726f4057","keyName":"e2e-auth-iso-a-1a8eb3","subscription":"e2e-auth-iso-d3082e","tenant":"e2e-shared-a-f5848c","userId":"b61f96ba-443d-46b5-8058-5a84726f4057","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-d3082e"}
{"level":"info","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5e7c29-6770-43db-b0ea-d1c1a412a875","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41280","PortSpecifier":{"PortValue":41280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:41280","PortSpecifier":{"PortValue":41280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726552,"nanos":668126375},"http":{"id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa138411-cc43-4d62-b480-8f9d1cb3a67e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44536","PortSpecifier":{"PortValue":44536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44536","PortSpecifier":{"PortValue":44536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726552,"nanos":710953167},"http":{"id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bc1a06a-8bdd-4f28-92bf-78a39802904c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3209da6-15d9-4238-8b98-1cb32795759f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:44552","PortSpecifier":{"PortValue":44552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726552,"nanos":750988705},"http":{"id":"c3209da6-15d9-4238-8b98-1cb32795759f","method":"GET","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bxd0PM0H06cGZ8P1_PRlRROvTtlcODI5E7Zl590XmsphgV5zrWaRjPDbqLGX"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bxd0PM0H06cGZ8P1_PRlRROvTtlcODI5E7Zl590XmsphgV5zrWaRjPDbqLGX\"}"}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T23:35:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3209da6-15d9-4238-8b98-1cb32795759f","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46144","PortSpecifier":{"PortValue":46144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a75d30b9-00dd-4ceb-a60a-4df464021516","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46144","PortSpecifier":{"PortValue":46144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726569,"nanos":929775045},"http":{"id":"a75d30b9-00dd-4ceb-a60a-4df464021516","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a75d30b9-00dd-4ceb-a60a-4df464021516","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33534","PortSpecifier":{"PortValue":33534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33534","PortSpecifier":{"PortValue":33534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726569,"nanos":966673146},"http":{"id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d9edbfd-2ece-456d-8df1-2e94968cbff9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726570,"nanos":28099480},"http":{"id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de3cf8d-9cb4-41c4-a9db-a1a569c37dc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33546","PortSpecifier":{"PortValue":33546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:33546","PortSpecifier":{"PortValue":33546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726570,"nanos":75586372},"http":{"id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"513ea8a4-b9d6-44f9-8b8b-0486864c4d1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726590,"nanos":332402244},"http":{"id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6fc50d3e-dc80-42da-bc78-b43e4e0b329e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56830","PortSpecifier":{"PortValue":56830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7e5a041-fc68-41ce-b520-c642f656d781","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56830","PortSpecifier":{"PortValue":56830}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726590,"nanos":368853178},"http":{"id":"a7e5a041-fc68-41ce-b520-c642f656d781","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e5a041-fc68-41ce-b520-c642f656d781","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56842","PortSpecifier":{"PortValue":56842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","method":"GET","path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:56842","PortSpecifier":{"PortValue":56842}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726590,"nanos":424175306},"http":{"id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","method":"GET","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c34666-3bd1-4ab2-b981-803f565fc3b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52242","PortSpecifier":{"PortValue":52242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","method":"GET","path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:52242","PortSpecifier":{"PortValue":52242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726590,"nanos":458540538},"http":{"id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","method":"GET","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2054e6ec-f1a0-4ad3-8b4f-e8a6967a1432",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33bd0c55-22b3-4f30-a1c5-741713fc3833","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ada20a11-3e0b-4011-8d28-75821e1617a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60468","PortSpecifier":{"PortValue":60468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726607,"nanos":660149961},"http":{"id":"ada20a11-3e0b-4011-8d28-75821e1617a6","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ada20a11-3e0b-4011-8d28-75821e1617a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50222","PortSpecifier":{"PortValue":50222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d71c382-aaee-4192-99fc-1d2300999a7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:50222","PortSpecifier":{"PortValue":50222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726607,"nanos":714216317},"http":{"id":"2d71c382-aaee-4192-99fc-1d2300999a7a","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/auth-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d71c382-aaee-4192-99fc-1d2300999a7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5611960-d643-4d7b-9c4c-04dd009e641d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:60482","PortSpecifier":{"PortValue":60482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726607,"nanos":753198700},"http":{"id":"e5611960-d643-4d7b-9c4c-04dd009e641d","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d4zvEvD00BCXHVv9_8CamRJFn50m0wNsLQoyu0lkW7TS3RGYs0Gh8z7ZGn3W"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1d4zvEvD00BCXHVv9_8CamRJFn50m0wNsLQoyu0lkW7TS3RGYs0Gh8z7ZGn3W\"}"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db2bb5cc-4670-491c-bc60-d42f0a94c239","keyName":"e2e-auth-iso-a-66328b","subscription":"e2e-auth-iso-b70862","tenant":"e2e-shared-a-f5848c","userId":"db2bb5cc-4670-491c-bc60-d42f0a94c239","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/auth-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b70862"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:36:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5611960-d643-4d7b-9c4c-04dd009e641d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83c5a2d3bdce7578a099b5914e865e38c154ddb07e4a21465b20bebe0c8214f0"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a1cb24fa3efc2c2c0daea9481107e8ffb8139c27309c3faad906da42ef3a126"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8691c303b755422b574a5dc839f25a4a4d23ef8b51fcd94cbe0185b622cf405"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4af501d07312169a43ee6c47b145605c05df81334246b3806bc832af8dac9497"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4b174308549e4b099d1a816ab63775a9ba538d9367d382c2c6d1492559f6e50"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e143107c3de8f958bae559f2e905242f8c15d676cbb96205a6c7a032c8657e36"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86080949758b721a9bf19d103d700ae9d598023989f8070a5832813eab844c5b"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e73e36e39627eefd12a7ec3c02228987a5d992d3919396838d6564a10d3218c"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2df53274f4a2b19761901e93fc532bc94e0c2a7c4fddec256685761d9d0a0b9"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0a4ec46823db6ed680e0546522006c104090074b6a35b7b4bbe92fb53c0967b"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae4832089b48618af6fe1f2ac8bdfea6f7a5e5e76b0c7fff30c6513d60464cfd"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e920a5dc01deff9656aeaf26e4d9bdc432e96c27c8aadd4a99c59eaf65a17840"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74574433c70ce62e385651c0ea7d7bbc62a1e6677028e2ae41f24b91b7c14374"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c186638eb53793bce78ce4cfcff69a0f8af20e1cd7dba8be7bf6f1b4e12fd49"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25380759a04bfb96e199bc16055e04e0e08caf94cda478926c8f6f111d4adc89"}
{"level":"info","ts":"2026-07-10T23:36:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49802b0c497ab439e803aefc45be543de8cbdbbfe23716fe5ce770aaf4279262"}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:37:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50"}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:37:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:37:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50"}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50"}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd9be008cf9ecf3b1162c2047a8e18850bda03c0b79c4ff4ff3ceed633d76aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd9be008cf9ecf3b1162c2047a8e18850bda03c0b79c4ff4ff3ceed633d76aa"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee993b1211560602c4ce465cbefa14b37a29212c458b24cc8faf08ef65334ce5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"debug","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee993b1211560602c4ce465cbefa14b37a29212c458b24cc8faf08ef65334ce5"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed"}
{"level":"info","ts":"2026-07-10T23:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b683cfc9-5fae-4bde-b6c0-47d134187645","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49516","PortSpecifier":{"PortValue":49516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726696,"nanos":272343433},"http":{"id":"b683cfc9-5fae-4bde-b6c0-47d134187645","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/sub-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b683cfc9-5fae-4bde-b6c0-47d134187645","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46768","PortSpecifier":{"PortValue":46768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46768","PortSpecifier":{"PortValue":46768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726696,"nanos":319611264},"http":{"id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/sub-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e795c8f2-f84f-4b37-bfb1-d0bf0151458a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:49528","PortSpecifier":{"PortValue":49528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726696,"nanos":361228118},"http":{"id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","method":"GET","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HkQQPid9idRVsLyp_x27Hn3er0HsRIYyZeZeNRqBqXVfVw39JTWck9MtUeKd"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HkQQPid9idRVsLyp_x27Hn3er0HsRIYyZeZeNRqBqXVfVw39JTWck9MtUeKd\"}"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5f7fc162-b3a6-4e90-b6d5-be54dbf42302","keyName":"e2e-sub-iso-981a3e","subscription":"e2e-a-only-bdb29c","tenant":"e2e-shared-a-f5848c","userId":"5f7fc162-b3a6-4e90-b6d5-be54dbf42302","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/sub-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bdb29c"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a118937a-8676-47f1-a6d8-7ab2f674c4e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46780","PortSpecifier":{"PortValue":46780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46780","PortSpecifier":{"PortValue":46780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726696,"nanos":407549579},"http":{"id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","method":"GET","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ruF5CPmgdVDMe9nc_gzB5KZAPT5DBKho6LE3T7z941z6QHeSfXzMt0REncuP"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ruF5CPmgdVDMe9nc_gzB5KZAPT5DBKho6LE3T7z941z6QHeSfXzMt0REncuP\"}"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ebf97cd3-9f20-41e4-8e6f-4cf2b37abe84","keyName":"e2e-sub-iso-c2aaf1","subscription":"e2e-b-only-bdb29c","tenant":"e2e-shared-b-27111a","userId":"ebf97cd3-9f20-41e4-8e6f-4cf2b37abe84","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/sub-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bdb29c"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5cb0713-9e0f-468a-8407-b845fccc84d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51604","PortSpecifier":{"PortValue":51604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51604","PortSpecifier":{"PortValue":51604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726715,"nanos":824162038},"http":{"id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/sub-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7daf0a22-3abf-4f3a-897b-47fe1be2909e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57822","PortSpecifier":{"PortValue":57822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57822","PortSpecifier":{"PortValue":57822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726715,"nanos":875630790},"http":{"id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/sub-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3756f0-abdb-41f2-8c07-fed23948e1d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65e17562-7957-4789-9ed4-fda9bf9a9137","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:51616","PortSpecifier":{"PortValue":51616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726715,"nanos":912777388},"http":{"id":"65e17562-7957-4789-9ed4-fda9bf9a9137","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ueW3EQV74vyPQFxF_UMStsBiG56boiXaaw7P3bPicBCEi82RfW1jPNrPE5dh"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ueW3EQV74vyPQFxF_UMStsBiG56boiXaaw7P3bPicBCEi82RfW1jPNrPE5dh\"}"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ed5760f-289f-4c8b-a744-38591bd2bcb6","keyName":"e2e-sub-iso-49a636","subscription":"e2e-shared-sub-855fe7","tenant":"e2e-shared-a-f5848c","userId":"5ed5760f-289f-4c8b-a744-38591bd2bcb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/sub-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-855fe7"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e17562-7957-4789-9ed4-fda9bf9a9137","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57832","PortSpecifier":{"PortValue":57832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"676893af-7f7a-46f1-b687-087aec4a53a7","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:57832","PortSpecifier":{"PortValue":57832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726715,"nanos":944148037},"http":{"id":"676893af-7f7a-46f1-b687-087aec4a53a7","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FA7NTNG6hiUnigWm_BXETmKSli9HaHzVsJCWSPXu0ySZGfR5Be8n03RvqUq8"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FA7NTNG6hiUnigWm_BXETmKSli9HaHzVsJCWSPXu0ySZGfR5Be8n03RvqUq8\"}"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39ecb32b-6d23-456f-b024-89fdf4399122","keyName":"e2e-sub-iso-c580ee","subscription":"e2e-shared-sub-855fe7","tenant":"e2e-shared-b-27111a","userId":"39ecb32b-6d23-456f-b024-89fdf4399122","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/sub-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-855fe7"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"676893af-7f7a-46f1-b687-087aec4a53a7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077"}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:38:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb8f914afdb12b3fa2d804d6a4d0943b5d1dae61df013a26612c2af54d76354e"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ca885b77e3e1eab297210e64b41d98cef8795a159741a2547a6cb80afa0752"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2dc757c04d3d2cdb562eafaffd6c4454d3fc1368eb1350ab1263d4ddc5bc6ea7"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b504c0abe99f7f589b8951ded2236ce078a6975ee09ee729622482f7f228156"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e70ece61d424dc6efb705cfaa1246ed8aec65dc275db490e091d7c7a8d53ce9"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78335cae6f7338920ef1c8e0dd7f501604a64a3f5470c974bdc3db07b2844693"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe92ce2e410af1fb562a8c55455b0344afd0b120499e4fbf01b26d6a4422f562"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22268eedf2d4835ed733b3d35721f8716572c8a8f975a8786f5bd33e312f092"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f9bed86cd0e125a910a85d926d0a85a39c1f3f9aee837ca88c6a8af18d9ee6"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5162d8948b2dd6dd44a62864efc2efab4a5710efcb5072a8efd818e8a982da42"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/923a8460b6f3bc70cdf5118b9d819b7601e0d7f272f1beeb236b48fe1c99bfd2"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffbc6ca07e28df9bfaac45a20923a9376051e3294ebbbd36a4d7924056ead3ad"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4214d70ddd46d5c0b17468c99b7844c447940ad1af13f7f25a8e92a366f1feed"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/383755d3df86eb8e2a53fa84f049b6259a945cdde8d55bfee4f8c9ce7b8c1db2"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fada42c577f918fc95c17cb21987455e701f7f133bf04d625cd6cddda4a62d50"}
{"level":"info","ts":"2026-07-10T23:38:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0739738cb247867366470b68175ca7d98dfbda2261cd504be52de50d2bde597f"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"}
{"level":"debug","ts":"2026-07-10T23:39:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bd9be008cf9ecf3b1162c2047a8e18850bda03c0b79c4ff4ff3ceed633d76aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bd9be008cf9ecf3b1162c2047a8e18850bda03c0b79c4ff4ff3ceed633d76aa"}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee993b1211560602c4ce465cbefa14b37a29212c458b24cc8faf08ef65334ce5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee993b1211560602c4ce465cbefa14b37a29212c458b24cc8faf08ef65334ce5"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T23:39:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"}
{"level":"debug","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:39:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54906","PortSpecifier":{"PortValue":54906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726768,"nanos":263836600},"http":{"id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52f27dea-d9c9-4983-a525-eb86e6f065cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34244","PortSpecifier":{"PortValue":34244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34244","PortSpecifier":{"PortValue":34244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726768,"nanos":305195897},"http":{"id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48559d32-ce50-47bc-a5b0-6eaa9f5be422","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54912","PortSpecifier":{"PortValue":54912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54912","PortSpecifier":{"PortValue":54912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726768,"nanos":346156851},"http":{"id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ae31ba0-900a-4066-af13-10f5c0d7f39e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54928","PortSpecifier":{"PortValue":54928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54928","PortSpecifier":{"PortValue":54928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726769,"nanos":405090291},"http":{"id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9199fafe-e5be-4015-95b7-e2164ef31f8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54938","PortSpecifier":{"PortValue":54938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726770,"nanos":443110907},"http":{"id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c0936a7-a2b2-4d19-a30d-8d0f7587a20c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6081af02-9f58-4b2c-9256-8892d41f5495","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:54946","PortSpecifier":{"PortValue":54946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726771,"nanos":481028031},"http":{"id":"6081af02-9f58-4b2c-9256-8892d41f5495","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6081af02-9f58-4b2c-9256-8892d41f5495","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47064","PortSpecifier":{"PortValue":47064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"423a7963-2ea0-4d2b-9581-58138b41a520","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47064","PortSpecifier":{"PortValue":47064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726772,"nanos":522462538},"http":{"id":"423a7963-2ea0-4d2b-9581-58138b41a520","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"423a7963-2ea0-4d2b-9581-58138b41a520","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47080","PortSpecifier":{"PortValue":47080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47080","PortSpecifier":{"PortValue":47080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726773,"nanos":564945543},"http":{"id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1489c719-cd85-4bdb-814c-d7ffb5ec6491","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:47094","PortSpecifier":{"PortValue":47094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726774,"nanos":601498002},"http":{"id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111hk0JmKEiTf2pWu_91aFGuE2yj2Ay8VroxAyd84quNr4nCBw7voR7jG09bM\"}"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","subscription":"e2e-rate-iso-a-a2f85f","tenant":"e2e-shared-a-f5848c","userId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-a2f85f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a2f85f"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a0fa27ef-ef2f-444c-a6f0-05fdb6d6b83a","keyName":"e2e-rate-a-a2f85f","selected_subscription":"e2e-rate-iso-a-a2f85f","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-a2f85f@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a2f85f","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fb2a58d-7845-452f-9851-9c0e8411fd3d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40302","PortSpecifier":{"PortValue":40302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28efdc28-053f-447f-b095-f2e72ee568ca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40302","PortSpecifier":{"PortValue":40302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726783,"nanos":387424935},"http":{"id":"28efdc28-053f-447f-b095-f2e72ee568ca","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28efdc28-053f-447f-b095-f2e72ee568ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58596","PortSpecifier":{"PortValue":58596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:58596","PortSpecifier":{"PortValue":58596}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726783,"nanos":446854548},"http":{"id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"]}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/60555e7ce252"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1efdf5fb-4d4e-4aac-840a-ec2dd65e978d"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2bbdbe40-dbcb-405a-9c35-59705a3e3101","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e52ee9-6188-43ad-93c6-d55fb2ca77ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40304","PortSpecifier":{"PortValue":40304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40304","PortSpecifier":{"PortValue":40304}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726783,"nanos":491424215},"http":{"id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4dd10665-41c4-4b99-9aad-451c1f8bd204","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1998ee63-067a-4dc5-a57d-e6673a63b914","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726784,"nanos":526353318},"http":{"id":"1998ee63-067a-4dc5-a57d-e6673a63b914","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1998ee63-067a-4dc5-a57d-e6673a63b914","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40310","PortSpecifier":{"PortValue":40310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c360aa74-5d65-4404-8c36-f7830fd97b56","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40310","PortSpecifier":{"PortValue":40310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726785,"nanos":564435037},"http":{"id":"c360aa74-5d65-4404-8c36-f7830fd97b56","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c360aa74-5d65-4404-8c36-f7830fd97b56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40326","PortSpecifier":{"PortValue":40326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726786,"nanos":604279162},"http":{"id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de1eb86-cd4b-4343-a280-1f0877ee61c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40340","PortSpecifier":{"PortValue":40340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40340","PortSpecifier":{"PortValue":40340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726787,"nanos":644669812},"http":{"id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fc67e29-8807-4d17-9e9f-32c5d50977b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40348","PortSpecifier":{"PortValue":40348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40348","PortSpecifier":{"PortValue":40348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726788,"nanos":682211765},"http":{"id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6efb22d-b85b-40db-86b9-eb5a7b501133","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41328888-4466-46d7-833a-11c39ea51db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40350","PortSpecifier":{"PortValue":40350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41328888-4466-46d7-833a-11c39ea51db0","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41328888-4466-46d7-833a-11c39ea51db0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40350","PortSpecifier":{"PortValue":40350}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726789,"nanos":725013139},"http":{"id":"41328888-4466-46d7-833a-11c39ea51db0","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41328888-4466-46d7-833a-11c39ea51db0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41328888-4466-46d7-833a-11c39ea51db0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41328888-4466-46d7-833a-11c39ea51db0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41328888-4466-46d7-833a-11c39ea51db0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9091d2d-28a9-4c66-9939-220471f7ace2","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:40356","PortSpecifier":{"PortValue":40356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726790,"nanos":762517033},"http":{"id":"d9091d2d-28a9-4c66-9939-220471f7ace2","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9091d2d-28a9-4c66-9939-220471f7ace2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34332","PortSpecifier":{"PortValue":34332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726791,"nanos":801259971},"http":{"id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cffe6e16-08a9-4b64-9fd0-d916fddddd15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34336","PortSpecifier":{"PortValue":34336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726792,"nanos":838161678},"http":{"id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2718edad-e4b7-4bbc-8944-0858aeb9ee14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34340","PortSpecifier":{"PortValue":34340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"987579ce-27bf-4626-b4fa-7b9c535fda77","method":"POST","path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions","host":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:34340","PortSpecifier":{"PortValue":34340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726793,"nanos":882488814},"http":{"id":"987579ce-27bf-4626-b4fa-7b9c535fda77","method":"POST","headers":{":authority":"e2e-shared-a-f5848c.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MnxmOoUTXASt5x0M_M9EeTtwy3g7SFs7Yi1cabNmtCkjzMji0iaXrHybGcnW\"}"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","subscription":"e2e-rate-iso-a-ca5d1a","tenant":"e2e-shared-a-f5848c","userId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\",\"requestedSubscription\":\"e2e-rate-iso-a-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f5848c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b9c08977-c5de-4008-9e56-6d8e3b6dde47","keyName":"e2e-rate-a-ca5d1a","selected_subscription":"e2e-rate-iso-a-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-a-f5848c/e2e-rate-iso-a-ca5d1a@ai-tenant-e2e-shared-a-f5848c/rate-test-model-f5848c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f5848c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ca5d1a","namespace":"ai-tenant-e2e-shared-a-f5848c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"987579ce-27bf-4626-b4fa-7b9c535fda77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36268","PortSpecifier":{"PortValue":36268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6b087c0-e34e-4273-af3b-bfcea736310e","method":"POST","path":"/ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a/v1/completions","host":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:36268","PortSpecifier":{"PortValue":36268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783726793,"nanos":925516663},"http":{"id":"f6b087c0-e34e-4273-af3b-bfcea736310e","method":"POST","headers":{":authority":"e2e-shared-b-27111a.apps.61502759-dd75-45ea-943f-60555e7ce252.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-v8A0PCMsfAAeih5m_SfcpvihZsUbcztTFwHJzMAR2V2k8Nx4Nd91InruTlwi"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-v8A0PCMsfAAeih5m_SfcpvihZsUbcztTFwHJzMAR2V2k8Nx4Nd91InruTlwi\"}"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2448003c-79f4-4558-a67c-c84fae25b06c","keyName":"e2e-rate-b-ca5d1a","subscription":"e2e-rate-iso-b-ca5d1a","tenant":"e2e-shared-b-27111a","userId":"2448003c-79f4-4558-a67c-c84fae25b06c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a\",\"requestedSubscription\":\"e2e-rate-iso-b-ca5d1a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-27111a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-27111a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca5d1a","namespace":"ai-tenant-e2e-shared-b-27111a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ca5d1a"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2448003c-79f4-4558-a67c-c84fae25b06c","keyName":"e2e-rate-b-ca5d1a","selected_subscription":"e2e-rate-iso-b-ca5d1a","selected_subscription_key":"ai-tenant-e2e-shared-b-27111a/e2e-rate-iso-b-ca5d1a@ai-tenant-e2e-shared-b-27111a/rate-test-model-27111a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-27111a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ca5d1a","namespace":"ai-tenant-e2e-shared-b-27111a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T23:39:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6b087c0-e34e-4273-af3b-bfcea736310e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T23:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcd1916e38a4d2d5f014f742b8568a17dc2658d6ba614aafb41bdd3b1d646077"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec40c95ccb38893d69cb9bd3e3461ebd28e4617d2196ef2b615058c08e1724fa"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1876279ad6733a0da73bb49c1a2a72ef357f0d538171038ce5de8b8e83cd9070"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cef42139e7e2eb864187d18398f4f579057dd92de722648061fde9179baa52ae"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab4f62feeb10fc19c6390bd03c9f78ba4a8cdd74a0a2b55b22c45f6d1c02179f"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce0f13f3dd38a8bac6dae00cb8833c0d520adbfe9a476bd24e41007a2ae53d1"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0502cab57f2e6e935d11f23eb9a7f7d87978ac5e888223f9db51f58e4bff515e"}
{"level":"info","ts":"2026-07-10T23:40:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fbaf6ddb5fb5aba08fb192a1984626b7a770f1ef5bf1cb6a50b26bf9f178939"}
{"level":"info","ts":"2026-07-10T23:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ed6be554d6fa3d6d9663826f86ff5ca05d6eb9b54223f98f1aa7f4ccdef70e4"}
{"level":"info","ts":"2026-07-10T23:40:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70508f115f81fb7d6e6e3377a78575299210f9eebc87390e1b23f30bfdd81943"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66ddc5731ae554c5347af3725b132a43f21f15b4ae7e071b55cbf98a7dd3034d"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/092cb73727887ad7c27b710c5f4116f032fc471842210c2b83054894778d69cc"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70e6ec419e6115901319cb91f2f296a4894d621290098beb36550f8047283481"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5c504977299a4abe354a76098fa21eb2db297734c9121963854e678667c334d"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a038fd92d18956788d69a60c2ba2635b09834b9ee975f4fad14481eb0a328881"}
{"level":"info","ts":"2026-07-10T23:40:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e7aa85a167b2b21775bf2ecbc90ab7f8108f9826cca64e4c49729dab7bfee55"}
{"level":"info","ts":"2026-07-10T23:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/457da8105329144dc475d6b726e543d3748d10eacb0d38fa0e0c04e19da78392"}
{"level":"info","ts":"2026-07-10T23:40:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bd9be008cf9ecf3b1162c2047a8e18850bda03c0b79c4ff4ff3ceed633d76aa"}
{"level":"info","ts":"2026-07-10T23:40:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee993b1211560602c4ce465cbefa14b37a29212c458b24cc8faf08ef65334ce5"}
{"level":"info","ts":"2026-07-10T23:40:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ca90158f872debb077fe05b0b46ef95bd12c397db2e25cd2a36cbac50ca466e"}
{"level":"info","ts":"2026-07-10T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/810d52b4f1bca24188dcfb371a22596947d7dcd8b4fc58edea14f943f08ccedb"}
{"level":"info","ts":"2026-07-10T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea62f3ef43d16d3b6bb0398024efbcef97b8f40e8223c10f31590045b415f2b7"}
{"level":"info","ts":"2026-07-10T23:40:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8cb0d6d4819bf5bca55bd26921050b6a41ea03fc552e7ce8e7dd7a595cea23f"}
{"level":"info","ts":"2026-07-10T23:40:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/749a0c815b6c37c936be65c83ec70b6602c14651460e21640919ac6dcdb6ea29"}