{"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42984","PortSpecifier":{"PortValue":42984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:42984","PortSpecifier":{"PortValue":42984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":201008158},"http":{"id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2b6wV6si4L6l8i2L_924gY2DPgftvpP3qIswhyC4xmectASEuuhWxrid2okN"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2b6wV6si4L6l8i2L_924gY2DPgftvpP3qIswhyC4xmectASEuuhWxrid2okN\"}"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"453fb3a4-c712-4574-8406-9890a8dde463","keyName":"e2e-sub-iso-f46c1c","subscription":"e2e-shared-sub-d3df82","tenant":"e2e-shared-a-d45fc5","userId":"453fb3a4-c712-4574-8406-9890a8dde463","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/sub-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d3df82"}
{"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4ae201-483c-4cd4-92c3-cf2ec8215d3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46146","PortSpecifier":{"PortValue":46146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811288,"nanos":233718482},"http":{"id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QoLRw0dlCidihovj_6jfX21Fubombey8AwC8Ba1uyqee2OphoAYjZlETApcF"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QoLRw0dlCidihovj_6jfX21Fubombey8AwC8Ba1uyqee2OphoAYjZlETApcF\"}"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4a0b0a3-071a-446d-96e0-4b8eaaeedf68","keyName":"e2e-sub-iso-29367e","subscription":"e2e-shared-sub-d3df82","tenant":"e2e-shared-b-474ecb","userId":"a4a0b0a3-071a-446d-96e0-4b8eaaeedf68","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/sub-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d3df82"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:54:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35ce3343-e3e2-477d-9f15-4789e5bb64bc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938b3d54720417de8effbb588ac8e6a298b4ddf1d57890d449d55dec7cef34bf"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38dd2d2e0fd528dcf5d88bddc0226b116c1871baeba255de180619864315305a"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a67bdb8090decb5b2e44dd8afda8d66c2cd1e0ecf79f8bc54b7936a8d0e4f00a"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848d18b1e85a860ba5afd845491c335107baf9f89f4b2ea341f6c58c3b594cfd"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"info","ts":"2026-07-23T12:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b0708b4bbfcdf5cfbe9d1aa496c37998c989a2dad0be7a8cf1ddd009a7024b"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e26a9375b35cc5546bdf14c56dd5f871a9c65ea3e4dd9914e6d3546e7f3652"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24cf98595444e7d0eda6719ae1271a7f5450435aece75d692b12669acfa53b92"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9aaaa2b5293e930f05bf25f5f34c1948e165136475b5bcab384a11af3bdb8254"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca899064bda560d4df7587e48d1e0b7a0faaa7dfd031189b5fe6d8e1aa64c290"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2051c98dcd78da56c5bea20649b8526a0b640e0a510bf6894f3f2a9471fcdd46"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4c95b9dfe1fdc12ff7aefc525b74b46793414910472dae190544f98617bc5f7"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfeaf184082e9a1a4cdeaf7c2993f122d5838a94d51c43bba00e7361a1d1389a"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3eb7b467d5380b9a662730872975d4d01af4eefbc7df92b7033a2c75891fa439"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2b84fd691d7bfeca4af1e6f231ddef699809de1971b4559d6de97e73308dec0"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b94df117678bd55672063f1e0e5773147f5ce1f81598fcfb1ff856c8a1ec04d"}
{"level":"info","ts":"2026-07-23T12:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b050df4735de7357c856fedbf3ebde69c73031e5a1bb7a46a6351af1b5ecc9e"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"}
{"level":"error","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"}
{"level":"info","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:55:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"error","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:55:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55610","PortSpecifier":{"PortValue":55610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55610","PortSpecifier":{"PortValue":55610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811346,"nanos":930931761},"http":{"id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81f84dd7-251f-4a81-8d9d-d90e723b940b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b74140e-6165-46c2-bff4-de537434fdd8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811346,"nanos":979127879},"http":{"id":"3b74140e-6165-46c2-bff4-de537434fdd8","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b74140e-6165-46c2-bff4-de537434fdd8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55616","PortSpecifier":{"PortValue":55616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ff19891-3709-4ae1-9db2-0f51544009c6","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55616","PortSpecifier":{"PortValue":55616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811347,"nanos":22445077},"http":{"id":"8ff19891-3709-4ae1-9db2-0f51544009c6","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff19891-3709-4ae1-9db2-0f51544009c6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55622","PortSpecifier":{"PortValue":55622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55622","PortSpecifier":{"PortValue":55622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811348,"nanos":100037982},"http":{"id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a56ff107-d98f-4dfd-a0f5-b03cef64b1be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55634","PortSpecifier":{"PortValue":55634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:55634","PortSpecifier":{"PortValue":55634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811349,"nanos":135266229},"http":{"id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6M6pgMOmN8Z7rwMv_AbikkeFCgUJ1oRV2t4COWSuctHBPmCFjYgJphe7QY9F\"}"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","subscription":"e2e-rate-iso-a-9f1180","tenant":"e2e-shared-a-d45fc5","userId":"defc7579-00ce-4867-8d0a-7dfe3915602c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1180\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1180"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"defc7579-00ce-4867-8d0a-7dfe3915602c","keyName":"e2e-rate-a-9f1180","selected_subscription":"e2e-rate-iso-a-9f1180","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-9f1180@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1180","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4355cbf-bb5a-4f6b-94fa-87383966dee7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac285529-edfa-4ef1-8f4f-c424150d8312","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46642","PortSpecifier":{"PortValue":46642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":54087609},"http":{"id":"ac285529-edfa-4ef1-8f4f-c424150d8312","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac285529-edfa-4ef1-8f4f-c424150d8312","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53268","PortSpecifier":{"PortValue":53268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":96822370},"http":{"id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"]}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9e9814df6731"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=30e8b036-3ed3-43e5-931c-4159ec0e5ea7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"687ee252-a56c-49e3-84a4-23a94a9873c7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09dc9d2a-6cee-4166-a020-9a94e789a6c7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"039d8d4f-69e1-4df8-b240-47e23336520c","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811360,"nanos":141108620},"http":{"id":"039d8d4f-69e1-4df8-b240-47e23336520c","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"039d8d4f-69e1-4df8-b240-47e23336520c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811361,"nanos":182067633},"http":{"id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"021f1d19-6c7f-4c2e-a644-cd7a5d4964b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46672","PortSpecifier":{"PortValue":46672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50184840-2fc3-46d4-ae49-1229211c8a2a","method":"POST","path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions","host":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:46672","PortSpecifier":{"PortValue":46672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811362,"nanos":221181313},"http":{"id":"50184840-2fc3-46d4-ae49-1229211c8a2a","method":"POST","headers":{":authority":"e2e-shared-a-d45fc5.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZyCSjpYHfwmgtVY9_i7XJ3r03tWxYcLYo8KO14IqOZBFqyl3anPbmbwUOgFK\"}"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","subscription":"e2e-rate-iso-a-890b60","tenant":"e2e-shared-a-d45fc5","userId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\",\"requestedSubscription\":\"e2e-rate-iso-a-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d45fc5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d45fc5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-890b60"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3a5b2d68-e9f4-4e71-9764-5c7950907cb1","keyName":"e2e-rate-a-890b60","selected_subscription":"e2e-rate-iso-a-890b60","selected_subscription_key":"ai-tenant-e2e-shared-a-d45fc5/e2e-rate-iso-a-890b60@ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d45fc5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-890b60","namespace":"ai-tenant-e2e-shared-a-d45fc5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d45fc5/rate-test-model-d45fc5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50184840-2fc3-46d4-ae49-1229211c8a2a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc734404-b084-4be7-b73e-075e49697274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53270","PortSpecifier":{"PortValue":53270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc734404-b084-4be7-b73e-075e49697274","method":"POST","path":"/ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb/v1/completions","host":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc734404-b084-4be7-b73e-075e49697274","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.9:53270","PortSpecifier":{"PortValue":53270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784811362,"nanos":259095186},"http":{"id":"fc734404-b084-4be7-b73e-075e49697274","method":"POST","headers":{":authority":"e2e-shared-b-474ecb.apps.a0f6a7f0-4d2a-404b-b2dc-9e9814df6731.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cPwDITFR7ppwnkZp_xhPuVInEJiukgV8tZ5H0Pw7KCxLuvVIHMCvxICuV0N0"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc734404-b084-4be7-b73e-075e49697274","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cPwDITFR7ppwnkZp_xhPuVInEJiukgV8tZ5H0Pw7KCxLuvVIHMCvxICuV0N0\"}"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6d229499-4140-482a-ac75-a82d4775d0d8","keyName":"e2e-rate-b-890b60","subscription":"e2e-rate-iso-b-890b60","tenant":"e2e-shared-b-474ecb","userId":"6d229499-4140-482a-ac75-a82d4775d0d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc734404-b084-4be7-b73e-075e49697274","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\",\"requestedSubscription\":\"e2e-rate-iso-b-890b60\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-474ecb.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-474ecb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-890b60","namespace":"ai-tenant-e2e-shared-b-474ecb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb"}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc734404-b084-4be7-b73e-075e49697274","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-474ecb/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-890b60"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc734404-b084-4be7-b73e-075e49697274","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6d229499-4140-482a-ac75-a82d4775d0d8","keyName":"e2e-rate-b-890b60","selected_subscription":"e2e-rate-iso-b-890b60","selected_subscription_key":"ai-tenant-e2e-shared-b-474ecb/e2e-rate-iso-b-890b60@ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-474ecb","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-890b60","namespace":"ai-tenant-e2e-shared-b-474ecb","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-474ecb/rate-test-model-474ecb"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc734404-b084-4be7-b73e-075e49697274","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:56:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc734404-b084-4be7-b73e-075e49697274","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0962eeafe97c764e044a79521b3187f66fad1f04ce21060238c2079d1dee524"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9729c52dd4f9b2a891c56c6a46a0dd17f4117c84051d31abc267df2d5067d94"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669edd0ec4531c3756d683ee966966138a17fa648ef3b0f3984a4fd4d740094a"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40d67fe130513f741c5700f76f8012305559823a975d5c2d5b5f3c354cd5569"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7558ee42e0c11ffd7d5b1fa9487cb35dac29a54df8d9afd36efebaab61e99dfd"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4534a195de5c3aa08af2915176288157fbb8bda090707d02a5f39d21ac7d5177"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a317fe8cbf91b0c597eff9514a9d94da5abfd00446fc6a76bfda0dfec80c2d4"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06d7c597791e2ebfdbd34ce71b079cb74988fd13ce16b5a46c68799480e48ee9"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a9947b6b66994d724145b352c1026fcb4847549bf442d68633ca5a0afedc1fe"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c730e02a475b98ed6bc9af212355438a97ee12afcaed22ab9585ba8df3f76f99"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/699b79155f94e91f3811643623db2e730cc23de73bff465248be455f8dd99cb4"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b708725cbd515d98fe22a4abd83d809092938cb968ea45af8ccf30eadc04fe"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76e7653f9ec1bdcd2876cd5d2f51c8027c95d9792740c64cf69e22ef1847cc76"}
{"level":"info","ts":"2026-07-23T12:56:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c673c26c320e21cdcdbd8408815f923d314580c43ee3c7a3416074339e61294"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/570952ede61da6f56959f4f385f3b5e42c8bddcb516a267153c60ce53ecc8d90"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6df22e3d850a34686af94a525fa2fe7085028b54df441b57854905ea82a8db8"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55c0f701c4ef0436baa1d8475679dad6b31bfb4e6c378aea2212d9d2cd65bda4"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a31546b9e3a82930b19f2745a6dfe059b0d48dba1b476383ec94330d0290601b"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cfbff913aa42a298961f5120aa8c10976b752a785641c7b9f7f08e37a4f3f69"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722cce07722ade81119764e03241fe830de4838b2c32a33ad793765102d5430d"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46fde6a3235f769a14e9145afd16a6ed06795c7489c181a8afc4275d5dc89e91"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55490ac232d1cd11562c3e948514009e9a834967173199dca38618a5f30f6c57"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ba07fd8b959add16591f284c3e9b9030166090aa09b8a3555860b1c161e1e38"}
{"level":"info","ts":"2026-07-23T12:56:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2643094e62366febab2f330f794fb81325df3f72c155dd4a476645ec7e8413a2"}