{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"error","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1cb25bf4ba0356155154743a22244a49cb63d3b820567a99767813c6d2eb88e"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7ab0a4343645c2039687df03b8dc513224d5039127d2cb8533d131db17b4a6d"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb98fd5bb7420566ef2d37a86696b1dd8c3a6af6e7f8e1441d5c0214ceedb01d"}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae8920577a4f7673ac7fa7f283fc87a9b14d65dca8c6c87cc7c2c350cab039a2"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfcaf84541942a9c9e0c1e4d680360886a63a83302bad6a86e16ccf7be9a162"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b971e3a7d19f06b4471ad2d40ebac7b987e20e61e569fcb2de26421c435b10e2"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cca51b234255b64c840ca9074e859a15aac3cef89669151268395f4838fac49"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31270d31cd7ab12555b1b17bc015dee4c0565b9854bf8d4abd8126b9ea0092a7"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28887c07f1f8d5d641f620811cafcc6cdef3b215782023490a1442223feb7e82"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/406f6057d6216dc1a4bb9fb1a927208accf37327252fb6a155d13fa1ce2391aa"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85ba167fdae272fbea8f8a8da5f2062b2eaf4c5738381dc7e038bba73f340e81"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e691a4020aa1f9550285f6f856c61ddc78c03893fe8503645082d70d3e747a8"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a739902d04841ae07ab6dca46b29de2bc4cf68ba714ee6d21cceab31d2d7b7d5"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/934456f08a512a336358de699c0b60545941d6330a64d99ee82a3d40ebb4df8f"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19d0c1c4d280799bbc6e9b8cc78ab502fd51a725c6527af2a653db9d11b5f7cb"}
{"level":"info","ts":"2026-07-06T20:10:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea397d751f0c2499d88d7f5524359e4c49be58bd16601bca106cb0e1dea3b2d3"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"error","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:10:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:10:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"info","ts":"2026-07-06T20:11:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:11:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"debug","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:11:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40778","PortSpecifier":{"PortValue":40778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":780806394},"http":{"id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ee1ae3f8-0fd7-491e-a51b-5cf7793af95b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f246d640-5747-477f-b673-b349365973b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f246d640-5747-477f-b673-b349365973b8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f246d640-5747-477f-b673-b349365973b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34840","PortSpecifier":{"PortValue":34840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":820272589},"http":{"id":"f246d640-5747-477f-b673-b349365973b8","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f246d640-5747-477f-b673-b349365973b8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f246d640-5747-477f-b673-b349365973b8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f246d640-5747-477f-b673-b349365973b8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f246d640-5747-477f-b673-b349365973b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f246d640-5747-477f-b673-b349365973b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368663,"nanos":859043256},"http":{"id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3aae402-eb0c-4cb2-9ec4-69a572679972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40806","PortSpecifier":{"PortValue":40806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40806","PortSpecifier":{"PortValue":40806}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368664,"nanos":909753521},"http":{"id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6460022-eb69-4eac-9ca8-256ec1ce8ef8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40810","PortSpecifier":{"PortValue":40810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:40810","PortSpecifier":{"PortValue":40810}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368665,"nanos":950008827},"http":{"id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ekaka42lAvtkwugj_ZfcwlR1bg4Cz5vO9lOQC92cAAaZjlT5VkKoBcgzhtIz\"}"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","subscription":"e2e-rate-iso-a-16fffd","tenant":"e2e-shared-a-7ba461","userId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-16fffd\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16fffd"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"bb16abb0-5c37-4584-8a2e-63e524cd30f2","keyName":"e2e-rate-a-16fffd","selected_subscription":"e2e-rate-iso-a-16fffd","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-16fffd@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16fffd","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13763abb-5bbe-44b6-ba02-1ce0ce41f745","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60706","PortSpecifier":{"PortValue":60706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60706","PortSpecifier":{"PortValue":60706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":886294607},"http":{"id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44cecc0f-d941-4dfb-a113-3c38d991dbfa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49036","PortSpecifier":{"PortValue":49036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":947291005},"http":{"id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"]}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/14fb9e990410"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b754c299-5a20-40bb-9dad-929c5cb04a96"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4c5c9b1d-59e4-4c06-9c51-913c43475eb5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6efe31c9-3b33-4cb5-ac8f-8edcb93ec7cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50785627-ea54-4f65-b391-c8fb17da43c5","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60708","PortSpecifier":{"PortValue":60708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368678,"nanos":983237881},"http":{"id":"50785627-ea54-4f65-b391-c8fb17da43c5","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50785627-ea54-4f65-b391-c8fb17da43c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60720","PortSpecifier":{"PortValue":60720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60720","PortSpecifier":{"PortValue":60720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368680,"nanos":29020342},"http":{"id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ed2533d-b7dd-4c24-bedd-472e5a2d886e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60734","PortSpecifier":{"PortValue":60734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","method":"POST","path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions","host":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:60734","PortSpecifier":{"PortValue":60734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368681,"nanos":70640519},"http":{"id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","method":"POST","headers":{":authority":"e2e-shared-a-7ba461.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gjK6qfochzD6EvcT_5ByYVEWyxQoIn1v8XSXmrdOIaOGxxJXH8ZRcSR9mltl\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","subscription":"e2e-rate-iso-a-cb6f9b","tenant":"e2e-shared-a-7ba461","userId":"96779a3a-55c8-4f88-913d-9d70c3806fec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\",\"requestedSubscription\":\"e2e-rate-iso-a-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ba461.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"96779a3a-55c8-4f88-913d-9d70c3806fec","keyName":"e2e-rate-a-cb6f9b","selected_subscription":"e2e-rate-iso-a-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-a-7ba461/e2e-rate-iso-a-cb6f9b@ai-tenant-e2e-shared-a-7ba461/rate-test-model-7ba461","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ba461","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cb6f9b","namespace":"ai-tenant-e2e-shared-a-7ba461","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128cd9ad-23a1-48e3-8bf0-b60002bf35dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","method":"POST","path":"/ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df/v1/completions","host":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49052","PortSpecifier":{"PortValue":49052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783368681,"nanos":113189480},"http":{"id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","method":"POST","headers":{":authority":"e2e-shared-b-ebe4df.apps.056fc693-e27c-4e87-aad9-14fb9e990410.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3p8Hv9EK3bTQ3P37_l6qCTxCdd95Wbn3KJrMdsSaE6kRNQhr46QDCCxVztJx"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3p8Hv9EK3bTQ3P37_l6qCTxCdd95Wbn3KJrMdsSaE6kRNQhr46QDCCxVztJx\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","keyName":"e2e-rate-b-cb6f9b","subscription":"e2e-rate-iso-b-cb6f9b","tenant":"e2e-shared-b-ebe4df","userId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\",\"requestedSubscription\":\"e2e-rate-iso-b-cb6f9b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ebe4df.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ebe4df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb6f9b","namespace":"ai-tenant-e2e-shared-b-ebe4df","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cb6f9b"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"163d0ae1-1265-4173-bdc1-5eadf2d87415","keyName":"e2e-rate-b-cb6f9b","selected_subscription":"e2e-rate-iso-b-cb6f9b","selected_subscription_key":"ai-tenant-e2e-shared-b-ebe4df/e2e-rate-iso-b-cb6f9b@ai-tenant-e2e-shared-b-ebe4df/rate-test-model-ebe4df","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ebe4df","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cb6f9b","namespace":"ai-tenant-e2e-shared-b-ebe4df","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T20:11:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9b16a47-9e57-4ae6-b7bd-b6f894579c2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T20:11:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ba19f78e4218c5653c2360fddd3e8569d317384c1dd1baab134db6b08446ca"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b48b66e9ecbb1c0ddbf7dfff34187e3200ed0d48998823ad2cb5bebc348828cc"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94a522b91ddc5afb6660d3129491f2872e5572d2d0accc3e8683f3024ef01b57"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cefd3244f3098dcf4281b2ff4f6f796d6eff1642593f8001d53a2f65e5e7b3b"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa3471bd660168d2d231595e247b23b360cfaafc1387924f67f6a1133e6d085d"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8b6352daa7124999985572acb226e88b9be9d252320328902475045fcda4922"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeaa1ed27db1275255afd77a1c64cb484085cc98f28d259153e41de348d17f42"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a979ffa78306320309aea2135140855ae439d06813c635c1cbc1368581f82b04"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd71a86b569ce80bdd38149f7d9e33bcbddaef74b868ce611a0c027afc720ddb"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/660839c60ec7435d2c86d921e8a0d59af7ed25b768b675c965964fe6cf08c2af"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b50fa30465011cd9450d00d400aad9bd8e0936e356f0b209c01b9aa8cdfc6746"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39370ebbcd6c79e11364c6b59db0e56106f6fc062e081cf5d45b95f0b61bc988"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08b5a57e5f307ff731d3db9d35406455a3e4e34c67f634b3b1076c193816c4c9"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a5132d83cae638cf97d81af99b823c1867c88bdf92f6ef2fd3e69379cac96bf"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6aeeac26bbe5d7e79d2b94e585c52b63637ed2d4a927f478b928eebdce97a632"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88afde50b37a5adc835a0c14708bab9837ea14dc0f22b62940251ed78ed7c2f"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c7076e53d8315ef3b72f093887c14680228b37ece2db41f87610e08c1f5ddee"}
{"level":"info","ts":"2026-07-06T20:11:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c1a67bccaed10a61fc41b6982eb34a5b8cfb0ab86f22157319199c42430eb22"}
{"level":"info","ts":"2026-07-06T20:11:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b9dc9f8553d3205d669cb60c0e9ad4425386f0eaa69f409d7e1545fa2d5bc546"}
{"level":"info","ts":"2026-07-06T20:11:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/014e070605eee8ef67ad20e670c506aee9c55fe0c6f803140a62f2b62035e7ba"}