--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"958dfdf561d6804a0ec24965d93ec7f7c989720ced4bfe72cbf70a28e24ba0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958dfdf561d6804a0ec24965d93ec7f7c989720ced4bfe72cbf70a28e24ba0c6"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"958dfdf561d6804a0ec24965d93ec7f7c989720ced4bfe72cbf70a28e24ba0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/958dfdf561d6804a0ec24965d93ec7f7c989720ced4bfe72cbf70a28e24ba0c6"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1"}
{"level":"info","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"error","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"error","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179"}
{"level":"error","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:43:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:43:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46054","PortSpecifier":{"PortValue":46054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","object":"source:{address:{socket_address:{address:\"10.132.0.17:46054\" port_value:46054}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712608 nanos:231768446} http:{id:\"38ac9fe4-a101-48a8-85f6-43fe0077dba5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"38ac9fe4-a101-48a8-85f6-43fe0077dba5\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":231768446,"seconds":1783712608}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46054},"address":"10.132.0.17:46054"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":231768446,"seconds":1783712608},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:46054","port":46054}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38ac9fe4-a101-48a8-85f6-43fe0077dba5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48714","PortSpecifier":{"PortValue":48714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","object":"source:{address:{socket_address:{address:\"10.132.0.17:48714\" port_value:48714}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712608 nanos:293634560} http:{id:\"ef74ec02-38ef-46e6-b1a1-794b6e948bca\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ef74ec02-38ef-46e6-b1a1-794b6e948bca\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":293634560,"seconds":1783712608}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48714},"address":"10.132.0.17:48714"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":293634560,"seconds":1783712608},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:48714","port":48714}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef74ec02-38ef-46e6-b1a1-794b6e948bca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677afa6a-1a23-4051-adec-43985f72049b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46060","PortSpecifier":{"PortValue":46060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"677afa6a-1a23-4051-adec-43985f72049b","method":"GET","path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677afa6a-1a23-4051-adec-43985f72049b","object":"source:{address:{socket_address:{address:\"10.132.0.17:46060\" port_value:46060}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712608 nanos:347450249} http:{id:\"677afa6a-1a23-4051-adec-43985f72049b\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"677afa6a-1a23-4051-adec-43985f72049b\"} path:\"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"677afa6a-1a23-4051-adec-43985f72049b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"677afa6a-1a23-4051-adec-43985f72049b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"677afa6a-1a23-4051-adec-43985f72049b"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"677afa6a-1a23-4051-adec-43985f72049b","method":"GET","path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":347450249,"seconds":1783712608}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":46060},"address":"10.132.0.17:46060"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"677afa6a-1a23-4051-adec-43985f72049b"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"677afa6a-1a23-4051-adec-43985f72049b","method":"GET","path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":347450249,"seconds":1783712608},"url_path":"/maas-api/v1/api-keys/6f59a61f-7512-4558-afb3-e5ab260a9530","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:46060","port":46060}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677afa6a-1a23-4051-adec-43985f72049b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677afa6a-1a23-4051-adec-43985f72049b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677afa6a-1a23-4051-adec-43985f72049b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48720","PortSpecifier":{"PortValue":48720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","method":"GET","path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","object":"source:{address:{socket_address:{address:\"10.132.0.17:48720\" port_value:48720}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712608 nanos:387635022} http:{id:\"0459b357-3349-4062-8b4d-d9a681bd7b9b\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"0459b357-3349-4062-8b4d-d9a681bd7b9b\"} path:\"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0459b357-3349-4062-8b4d-d9a681bd7b9b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","method":"GET","path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":387635022,"seconds":1783712608}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48720},"address":"10.132.0.17:48720"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"0459b357-3349-4062-8b4d-d9a681bd7b9b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","method":"GET","path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":387635022,"seconds":1783712608},"url_path":"/maas-api/v1/api-keys/7eba6cb0-561b-4b3a-8a14-b35ac488f9ae","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:48720","port":48720}}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0459b357-3349-4062-8b4d-d9a681bd7b9b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51114","PortSpecifier":{"PortValue":51114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e41d85c-7f90-452e-880f-bb66c291add0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","object":"source:{address:{socket_address:{address:\"10.132.0.17:51114\" port_value:51114}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712619 nanos:934963353} http:{id:\"9e41d85c-7f90-452e-880f-bb66c291add0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"9e41d85c-7f90-452e-880f-bb66c291add0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9e41d85c-7f90-452e-880f-bb66c291add0"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"9e41d85c-7f90-452e-880f-bb66c291add0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":934963353,"seconds":1783712619}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51114},"address":"10.132.0.17:51114"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"9e41d85c-7f90-452e-880f-bb66c291add0"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"9e41d85c-7f90-452e-880f-bb66c291add0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":934963353,"seconds":1783712619},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:51114","port":51114}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e41d85c-7f90-452e-880f-bb66c291add0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:52298","PortSpecifier":{"PortValue":52298}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"606cdc14-daaa-45ef-9608-86c3d98692d9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","object":"source:{address:{socket_address:{address:\"10.132.0.17:52298\" port_value:52298}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712619 nanos:978207936} http:{id:\"606cdc14-daaa-45ef-9608-86c3d98692d9\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"606cdc14-daaa-45ef-9608-86c3d98692d9\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"606cdc14-daaa-45ef-9608-86c3d98692d9"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"606cdc14-daaa-45ef-9608-86c3d98692d9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":978207936,"seconds":1783712619}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52298},"address":"10.132.0.17:52298"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"606cdc14-daaa-45ef-9608-86c3d98692d9"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"606cdc14-daaa-45ef-9608-86c3d98692d9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":978207936,"seconds":1783712619},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:52298","port":52298}}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"606cdc14-daaa-45ef-9608-86c3d98692d9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51122","PortSpecifier":{"PortValue":51122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8804e470-200a-411e-8495-999d3d8fa5f9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","object":"source:{address:{socket_address:{address:\"10.132.0.17:51122\" port_value:51122}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712620 nanos:19894843} http:{id:\"8804e470-200a-411e-8495-999d3d8fa5f9\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8804e470-200a-411e-8495-999d3d8fa5f9\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-PyUGFfNK8VrlC2SS_YqdGd9e8RuQik7AMhIsFktMyv9iGnChSF1n0HHNFqoV"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf3001cb-a3e2-4738-9305-5f7e42fd280a","keyName":"e2e-auth-iso-a-707d8d","subscription":"e2e-auth-iso-cc4fed","tenant":"e2e-shared-a-f25aa8","userId":"cf3001cb-a3e2-4738-9305-5f7e42fd280a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8804e470-200a-411e-8495-999d3d8fa5f9"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"8804e470-200a-411e-8495-999d3d8fa5f9","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":19894843,"seconds":1783712620}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":51122},"address":"10.132.0.17:51122"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8804e470-200a-411e-8495-999d3d8fa5f9"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"8804e470-200a-411e-8495-999d3d8fa5f9","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":19894843,"seconds":1783712620},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:51122","port":51122}}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-cc4fed"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8804e470-200a-411e-8495-999d3d8fa5f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35520","PortSpecifier":{"PortValue":35520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f052834f-6609-41b0-a1a6-889784b2ba7a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","object":"source:{address:{socket_address:{address:\"10.132.0.17:35520\" port_value:35520}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712632 nanos:796756698} http:{id:\"f052834f-6609-41b0-a1a6-889784b2ba7a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f052834f-6609-41b0-a1a6-889784b2ba7a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f052834f-6609-41b0-a1a6-889784b2ba7a"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f052834f-6609-41b0-a1a6-889784b2ba7a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":796756698,"seconds":1783712632}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35520},"address":"10.132.0.17:35520"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f052834f-6609-41b0-a1a6-889784b2ba7a"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f052834f-6609-41b0-a1a6-889784b2ba7a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":796756698,"seconds":1783712632},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:35520","port":35520}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f052834f-6609-41b0-a1a6-889784b2ba7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44302","PortSpecifier":{"PortValue":44302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a4a745c-8691-4c3e-b69f-647261d137bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","object":"source:{address:{socket_address:{address:\"10.132.0.17:44302\" port_value:44302}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712632 nanos:836991144} http:{id:\"8a4a745c-8691-4c3e-b69f-647261d137bb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"8a4a745c-8691-4c3e-b69f-647261d137bb\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8a4a745c-8691-4c3e-b69f-647261d137bb"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"8a4a745c-8691-4c3e-b69f-647261d137bb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":836991144,"seconds":1783712632}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44302},"address":"10.132.0.17:44302"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"8a4a745c-8691-4c3e-b69f-647261d137bb"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"8a4a745c-8691-4c3e-b69f-647261d137bb","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":836991144,"seconds":1783712632},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:44302","port":44302}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a4a745c-8691-4c3e-b69f-647261d137bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44314","PortSpecifier":{"PortValue":44314}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","object":"source:{address:{socket_address:{address:\"10.132.0.17:44314\" port_value:44314}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712632 nanos:876588792} http:{id:\"a607f7ac-7394-9100-82b2-e1d381f9c3ea\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a607f7ac-7394-9100-82b2-e1d381f9c3ea\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KucSUPPwaCP3WGIC_QjsCZK1HFE859D4w902wHEbPn9klRWKHIpZQdOWVRJ5"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":876588792,"seconds":1783712632}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":44314},"address":"10.132.0.17:44314"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":876588792,"seconds":1783712632},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:44314","port":44314}}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T19:43:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a607f7ac-7394-9100-82b2-e1d381f9c3ea","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","object":"source:{address:{socket_address:{address:\"10.132.0.17:53758\" port_value:53758}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712643 nanos:552785133} http:{id:\"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":552785133,"seconds":1783712643}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53758},"address":"10.132.0.17:53758"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":552785133,"seconds":1783712643},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53758","port":53758}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c53fe8fa-2b61-47f8-9ad0-305d0ed0f588","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","object":"source:{address:{socket_address:{address:\"10.132.0.17:33378\" port_value:33378}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712643 nanos:588419977} http:{id:\"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":588419977,"seconds":1783712643}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33378},"address":"10.132.0.17:33378"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":588419977,"seconds":1783712643},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:33378","port":33378}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eeb05e2a-1aca-4440-8d4c-c9e65540ee3c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1430fe87-c07e-4468-be57-6cf4c1d67038","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","object":"source:{address:{socket_address:{address:\"10.132.0.17:53760\" port_value:53760}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712643 nanos:628805431} http:{id:\"1430fe87-c07e-4468-be57-6cf4c1d67038\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/search\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"163\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1430fe87-c07e-4468-be57-6cf4c1d67038\"} path:\"/maas-api/v1/api-keys/search\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1430fe87-c07e-4468-be57-6cf4c1d67038"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"1430fe87-c07e-4468-be57-6cf4c1d67038","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":628805431,"seconds":1783712643}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53760},"address":"10.132.0.17:53760"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1430fe87-c07e-4468-be57-6cf4c1d67038"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"1430fe87-c07e-4468-be57-6cf4c1d67038","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":628805431,"seconds":1783712643},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53760","port":53760}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1430fe87-c07e-4468-be57-6cf4c1d67038","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33386","PortSpecifier":{"PortValue":33386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","object":"source:{address:{socket_address:{address:\"10.132.0.17:33386\" port_value:33386}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712643 nanos:664769066} http:{id:\"5943760f-3a8a-4f02-b6e3-e66e848eee49\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/search\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"163\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5943760f-3a8a-4f02-b6e3-e66e848eee49\"} path:\"/maas-api/v1/api-keys/search\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5943760f-3a8a-4f02-b6e3-e66e848eee49"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":664769066,"seconds":1783712643}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33386},"address":"10.132.0.17:33386"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"163","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5943760f-3a8a-4f02-b6e3-e66e848eee49"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","method":"POST","path":"/maas-api/v1/api-keys/search","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":664769066,"seconds":1783712643},"url_path":"/maas-api/v1/api-keys/search","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:33386","port":33386}}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5943760f-3a8a-4f02-b6e3-e66e848eee49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55532","PortSpecifier":{"PortValue":55532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","object":"source:{address:{socket_address:{address:\"10.132.0.17:55532\" port_value:55532}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712656 nanos:406063645} http:{id:\"fd4d877b-b4eb-48d7-856e-2103204dce3a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"fd4d877b-b4eb-48d7-856e-2103204dce3a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fd4d877b-b4eb-48d7-856e-2103204dce3a"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":406063645,"seconds":1783712656}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55532},"address":"10.132.0.17:55532"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"fd4d877b-b4eb-48d7-856e-2103204dce3a"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":406063645,"seconds":1783712656},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:55532","port":55532}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd4d877b-b4eb-48d7-856e-2103204dce3a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54808","PortSpecifier":{"PortValue":54808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","object":"source:{address:{socket_address:{address:\"10.132.0.17:54808\" port_value:54808}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712656 nanos:443776196} http:{id:\"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":443776196,"seconds":1783712656}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54808},"address":"10.132.0.17:54808"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":443776196,"seconds":1783712656},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:54808","port":54808}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0f7f006-7edc-41fe-a4a3-5d47d4fc0bbe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54814","PortSpecifier":{"PortValue":54814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01068119-85fb-4e09-9ba9-397d9ca01f12","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","object":"source:{address:{socket_address:{address:\"10.132.0.17:54814\" port_value:54814}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712656 nanos:480672962} http:{id:\"01068119-85fb-4e09-9ba9-397d9ca01f12\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"01068119-85fb-4e09-9ba9-397d9ca01f12\"} path:\"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"01068119-85fb-4e09-9ba9-397d9ca01f12"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"01068119-85fb-4e09-9ba9-397d9ca01f12","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":480672962,"seconds":1783712656}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54814},"address":"10.132.0.17:54814"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"01068119-85fb-4e09-9ba9-397d9ca01f12"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"01068119-85fb-4e09-9ba9-397d9ca01f12","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":480672962,"seconds":1783712656},"url_path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:54814","port":54814}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01068119-85fb-4e09-9ba9-397d9ca01f12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55538","PortSpecifier":{"PortValue":55538}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","object":"source:{address:{socket_address:{address:\"10.132.0.17:55538\" port_value:55538}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712656 nanos:514868235} http:{id:\"ff9b0bd3-6cf0-47be-bc15-a88688052fac\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ff9b0bd3-6cf0-47be-bc15-a88688052fac\"} path:\"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":514868235,"seconds":1783712656}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":55538},"address":"10.132.0.17:55538"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","method":"GET","path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":514868235,"seconds":1783712656},"url_path":"/maas-api/v1/api-keys/b403d7cc-a1e3-4766-94d6-f67ffde48d1e","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:55538","port":55538}}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff9b0bd3-6cf0-47be-bc15-a88688052fac","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40592","PortSpecifier":{"PortValue":40592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","object":"source:{address:{socket_address:{address:\"10.132.0.17:40592\" port_value:40592}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712667 nanos:111585620} http:{id:\"1170ff32-2182-4ed3-a9f3-07fcf90b9f57\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"1170ff32-2182-4ed3-a9f3-07fcf90b9f57\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":111585620,"seconds":1783712667}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40592},"address":"10.132.0.17:40592"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":111585620,"seconds":1783712667},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:40592","port":40592}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1170ff32-2182-4ed3-a9f3-07fcf90b9f57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36488","PortSpecifier":{"PortValue":36488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59bba263-6ad1-4968-9499-7aa6ceac410e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","object":"source:{address:{socket_address:{address:\"10.132.0.17:36488\" port_value:36488}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712667 nanos:151585597} http:{id:\"59bba263-6ad1-4968-9499-7aa6ceac410e\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"72\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"59bba263-6ad1-4968-9499-7aa6ceac410e\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"59bba263-6ad1-4968-9499-7aa6ceac410e"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"59bba263-6ad1-4968-9499-7aa6ceac410e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":151585597,"seconds":1783712667}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36488},"address":"10.132.0.17:36488"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"72","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"59bba263-6ad1-4968-9499-7aa6ceac410e"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"59bba263-6ad1-4968-9499-7aa6ceac410e","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":151585597,"seconds":1783712667},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:36488","port":36488}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/auth-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59bba263-6ad1-4968-9499-7aa6ceac410e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40594","PortSpecifier":{"PortValue":40594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","object":"source:{address:{socket_address:{address:\"10.132.0.17:40594\" port_value:40594}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712667 nanos:188173863} http:{id:\"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OL3OwbVNEgxldC98_E5W5PxJF62Kyy3XnsnJDGn1WSK1nSjgoXogvyL2WI29"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f49f39e-e5f4-4911-94f6-5bb642751253","keyName":"e2e-auth-iso-a-16bd63","subscription":"e2e-auth-iso-0a9765","tenant":"e2e-shared-a-f25aa8","userId":"4f49f39e-e5f4-4911-94f6-5bb642751253","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":188173863,"seconds":1783712667}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":40594},"address":"10.132.0.17:40594"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":188173863,"seconds":1783712667},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:40594","port":40594}}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/auth-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0a9765"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:44:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d80a31d-1b39-4dec-aab7-ea3f711cdbc1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6bb0992b01bec5e4bf7661ea1310efc93c63e880a248b5ef36d52f5bafc89485"}
{"level":"info","ts":"2026-07-10T19:44:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f5804574ba4d4b60396d2509e978ae73b68ae4d1fb9c23f4a57680e444567a1"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/941ad8b8fd165c7e2802dd8803fd06535a54dfa23f30ae3d740d83e1a9619529"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3e57d703e375fb911d84fd5b8e4dfe53933f971333136ad9e8811691a1d2eb4"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bb38420fff4d4a7e8fa27843401414b64fd632689cdbded51352caff10bbad6"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db16ca9de7f08171006be0ac72ec2d26164877b401ee4c13f1fc0c1d095f6840"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efbbaffef8b201535436fba7fffc0c6da218066488dc9d2f956fd2e8e80d0784"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/958dfdf561d6804a0ec24965d93ec7f7c989720ced4bfe72cbf70a28e24ba0c6"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/805d950192c0839ce459a0011814836a5a50a3f797f02fc48fc27b3daf9e2db8"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3b741ef2da1305e408d8c875497c9cf5d0a997b077b4e6828556e8231024179"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe13ae25108636fdc5a1653006e17e1d0a6e0e3359ed18b523411bcd49e0e541"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/baff420ab82c442cc05b230a85767405ef20312c807dda34c3ec51b6be8466a6"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd26cd6c81087c155850692537f33313fa7d7a3e7ebbe5e579a80863bee13baf"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4561681b73b23227be67666e8af17fd902bbb54a2040762853612285a72bd062"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f566bb7a069f8feb2a0ad12b871733dd925c0aba910bec04d79b2dae6985c9c"}
{"level":"info","ts":"2026-07-10T19:44:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dbc9dbcbe2bb107d1630c3677e0243a6ba807e8a5b077218ee092ab88cfbf15"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:44:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:44:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"error","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bbb28e97883f71560dabeefca887a302e21409c79caa94c6be4384702275de"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bbb28e97883f71560dabeefca887a302e21409c79caa94c6be4384702275de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"debug","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68"}
{"level":"info","ts":"2026-07-10T19:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"info","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","object":"source:{address:{socket_address:{address:\"10.132.0.17:49108\" port_value:49108}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712731 nanos:83200940} http:{id:\"eb80d21d-ce26-42f8-b6cd-ddddc216ade7\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"eb80d21d-ce26-42f8-b6cd-ddddc216ade7\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":83200940,"seconds":1783712731}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49108},"address":"10.132.0.17:49108"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":83200940,"seconds":1783712731},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:49108","port":49108}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/sub-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb80d21d-ce26-42f8-b6cd-ddddc216ade7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60516","PortSpecifier":{"PortValue":60516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","object":"source:{address:{socket_address:{address:\"10.132.0.17:60516\" port_value:60516}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712731 nanos:126434117} http:{id:\"5c570ded-5a3f-4039-bb35-8e2d0cae35de\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"67\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5c570ded-5a3f-4039-bb35-8e2d0cae35de\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":126434117,"seconds":1783712731}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60516},"address":"10.132.0.17:60516"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"67","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":126434117,"seconds":1783712731},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:60516","port":60516}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/sub-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c570ded-5a3f-4039-bb35-8e2d0cae35de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49110","PortSpecifier":{"PortValue":49110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","object":"source:{address:{socket_address:{address:\"10.132.0.17:49110\" port_value:49110}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712731 nanos:167330750} http:{id:\"7f5cb0e0-c67b-4555-ba58-52cbf947ede0\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"7f5cb0e0-c67b-4555-ba58-52cbf947ede0\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1d12uXsIGsJAzTATu_fiBHeCrlLNflCNDKE3JjDejDEzB3G4sjCId4fYemouz"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1cf561b1-443f-4c01-93ba-2416c6e4d1a1","keyName":"e2e-sub-iso-26ac04","subscription":"e2e-a-only-74e06e","tenant":"e2e-shared-a-f25aa8","userId":"1cf561b1-443f-4c01-93ba-2416c6e4d1a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":167330750,"seconds":1783712731}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49110},"address":"10.132.0.17:49110"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":167330750,"seconds":1783712731},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:49110","port":49110}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/sub-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-74e06e"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7f5cb0e0-c67b-4555-ba58-52cbf947ede0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60526","PortSpecifier":{"PortValue":60526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","object":"source:{address:{socket_address:{address:\"10.132.0.17:60526\" port_value:60526}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712731 nanos:210651855} http:{id:\"36497ea3-9b35-4fa4-9bc1-e26f4160174b\" method:\"GET\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"GET\"} headers:{key:\":path\" value:\"/maas-api/v1/subscriptions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"36497ea3-9b35-4fa4-9bc1-e26f4160174b\"} path:\"/maas-api/v1/subscriptions\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-iWUPNVkd1AIG8g9G_HZKBDWRWLDY1WlVxKDYhAKkKnCJ3h9W9MCueX7IkAHV"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"58dced3c-e43b-4c0c-bbc8-350cc1fdd393","keyName":"e2e-sub-iso-6a1ebf","subscription":"e2e-b-only-74e06e","tenant":"e2e-shared-b-fc4b18","userId":"58dced3c-e43b-4c0c-bbc8-350cc1fdd393","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":210651855,"seconds":1783712731}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":60526},"address":"10.132.0.17:60526"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","method":"GET","path":"/maas-api/v1/subscriptions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":210651855,"seconds":1783712731},"url_path":"/maas-api/v1/subscriptions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:60526","port":60526}}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/sub-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-74e06e"}
{"level":"info","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36497ea3-9b35-4fa4-9bc1-e26f4160174b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57162","PortSpecifier":{"PortValue":57162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","object":"source:{address:{socket_address:{address:\"10.132.0.17:57162\" port_value:57162}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712743 nanos:408945445} http:{id:\"6a990507-3ad5-4f62-a8b7-9fda5befc9a3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6a990507-3ad5-4f62-a8b7-9fda5befc9a3\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":408945445,"seconds":1783712743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57162},"address":"10.132.0.17:57162"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":408945445,"seconds":1783712743},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:57162","port":57162}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/sub-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a990507-3ad5-4f62-a8b7-9fda5befc9a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59708","PortSpecifier":{"PortValue":59708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"753760a1-51c6-43c4-bb58-73ebc40c9489","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","object":"source:{address:{socket_address:{address:\"10.132.0.17:59708\" port_value:59708}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712743 nanos:449082697} http:{id:\"753760a1-51c6-43c4-bb58-73ebc40c9489\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"71\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"753760a1-51c6-43c4-bb58-73ebc40c9489\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"753760a1-51c6-43c4-bb58-73ebc40c9489"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"753760a1-51c6-43c4-bb58-73ebc40c9489","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":449082697,"seconds":1783712743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59708},"address":"10.132.0.17:59708"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"71","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"753760a1-51c6-43c4-bb58-73ebc40c9489"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"753760a1-51c6-43c4-bb58-73ebc40c9489","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":449082697,"seconds":1783712743},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:59708","port":59708}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/sub-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"753760a1-51c6-43c4-bb58-73ebc40c9489","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:57178","PortSpecifier":{"PortValue":57178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4bcaa825-925f-434e-9dcc-31a05cc15841","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","object":"source:{address:{socket_address:{address:\"10.132.0.17:57178\" port_value:57178}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712743 nanos:490383754} http:{id:\"4bcaa825-925f-434e-9dcc-31a05cc15841\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4bcaa825-925f-434e-9dcc-31a05cc15841\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taG9tQqwywMK2zuX_mFRFZax1P0jruXyNoNrZUkvPnhNFydrCx53iBujOWP2"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31769fed-81b4-4512-b0a4-a36865fceeb8","keyName":"e2e-sub-iso-20cbea","subscription":"e2e-shared-sub-8b566c","tenant":"e2e-shared-a-f25aa8","userId":"31769fed-81b4-4512-b0a4-a36865fceeb8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4bcaa825-925f-434e-9dcc-31a05cc15841"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4bcaa825-925f-434e-9dcc-31a05cc15841","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":490383754,"seconds":1783712743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":57178},"address":"10.132.0.17:57178"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4bcaa825-925f-434e-9dcc-31a05cc15841"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4bcaa825-925f-434e-9dcc-31a05cc15841","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":490383754,"seconds":1783712743},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:57178","port":57178}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/sub-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8b566c"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4bcaa825-925f-434e-9dcc-31a05cc15841","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59718","PortSpecifier":{"PortValue":59718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","object":"source:{address:{socket_address:{address:\"10.132.0.17:59718\" port_value:59718}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712743 nanos:521360587} http:{id:\"f670bd69-fabb-4ee5-8226-ff30e0aed265\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/internal/v1/subscriptions/select\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"187\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f670bd69-fabb-4ee5-8226-ff30e0aed265\"} path:\"/maas-api/internal/v1/subscriptions/select\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xaKsWgdAWiFiDhnY_UYQKDEPoPgkNCre3CrK51MP5zXaD0GEk0Ld52MscErN"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4ba3ca0-b8b0-4629-918e-ed416afdf998","keyName":"e2e-sub-iso-5bb3a8","subscription":"e2e-shared-sub-8b566c","tenant":"e2e-shared-b-fc4b18","userId":"a4ba3ca0-b8b0-4629-918e-ed416afdf998","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f670bd69-fabb-4ee5-8226-ff30e0aed265"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":521360587,"seconds":1783712743}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":59718},"address":"10.132.0.17:59718"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"187","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f670bd69-fabb-4ee5-8226-ff30e0aed265"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":521360587,"seconds":1783712743},"url_path":"/maas-api/internal/v1/subscriptions/select","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:59718","port":59718}}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/sub-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-8b566c"}
{"level":"info","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f670bd69-fabb-4ee5-8226-ff30e0aed265","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56e7f83914e9cd8855af0e619f45f0f4f4b35cb927a8e8bdb3e998541aa0c3d6"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fb9c756bf03b799fd541cb06a40fc3d43b2f57d978317e6d92c34bafb359a8e"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9acc4e8e40d631ae0cff2d4548fe9047f439956d268499e4f1d948442ccf33f"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7ea6d19db79b4502f637f83aada19fed2f1f5d70c121fdcbe30ceb7c0868a1f"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e79e353596bf7c53a83b3cefb95a38cf9bc9e0ce519aefe9b556aebd15998c2"}
{"level":"info","ts":"2026-07-10T19:45:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/515c7b570d4eaf8c264b4c51d4759cad8f20e1a97b4b74011676d4aa45d02a37"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ddc156cb4ef1441918514d027bd9dbd9645997b19045c072c63dbb60cf34e2f"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7af5a746631784b27640e4cbc835ea5deb3235925662197b53ad665f38f14d7"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8641404d7dc2056128336128d3d348f56ea98bd77f68afaa0a09b320bf3cd0ec"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb0d1b7989b93413ff642d59a80884371c170128a9ef79477ca75ad2ea8cea79"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b92b69716d1b4a593d2e321c5a46efe1f24dfc22b31af79aea00187613f4eb68"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a41eab26cd5b1b4c038665667a6eabe3431cd8af97c170c785ce5bd1831bf17"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdf98164a157f7b015bf07b6d21d539e1f09a093cee8acb4689e453767b5d5d3"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf6526314837bf6a1fdc2a4dcf17dadcf6d2dfacdef858532723de894bc191e6"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b715398b3308b44f94de13d0a1f1d1d28095be45a2b622fd1ce7126cb225bdb"}
{"level":"info","ts":"2026-07-10T19:45:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97012013724880157d2c7f68bcc9ba151e8251bc163e24617d922dd445a1fe23"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"error","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"error","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"}
{"level":"info","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"error","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"error","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85bbb28e97883f71560dabeefca887a302e21409c79caa94c6be4384702275de","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"}
{"level":"error","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T19:46:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85bbb28e97883f71560dabeefca887a302e21409c79caa94c6be4384702275de"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"debug","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"}
{"level":"info","ts":"2026-07-10T19:46:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45328","PortSpecifier":{"PortValue":45328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c122b20-d25d-40fe-897f-ae323d0c4934","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","object":"source:{address:{socket_address:{address:\"10.132.0.17:45328\" port_value:45328}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712815 nanos:164781699} http:{id:\"4c122b20-d25d-40fe-897f-ae323d0c4934\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4c122b20-d25d-40fe-897f-ae323d0c4934\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4c122b20-d25d-40fe-897f-ae323d0c4934"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4c122b20-d25d-40fe-897f-ae323d0c4934","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":164781699,"seconds":1783712815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45328},"address":"10.132.0.17:45328"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4c122b20-d25d-40fe-897f-ae323d0c4934"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4c122b20-d25d-40fe-897f-ae323d0c4934","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":164781699,"seconds":1783712815},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:45328","port":45328}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c122b20-d25d-40fe-897f-ae323d0c4934","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48122","PortSpecifier":{"PortValue":48122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33731973-29f7-4265-a3d3-5b5709d5635f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","object":"source:{address:{socket_address:{address:\"10.132.0.17:48122\" port_value:48122}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712815 nanos:219569984} http:{id:\"33731973-29f7-4265-a3d3-5b5709d5635f\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"33731973-29f7-4265-a3d3-5b5709d5635f\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"33731973-29f7-4265-a3d3-5b5709d5635f"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"33731973-29f7-4265-a3d3-5b5709d5635f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":219569984,"seconds":1783712815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":48122},"address":"10.132.0.17:48122"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdC02NzY4NzY5NDc5LWZmZzhnCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLWZjNGIxOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi1mYzRiMTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"33731973-29f7-4265-a3d3-5b5709d5635f"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"33731973-29f7-4265-a3d3-5b5709d5635f","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":219569984,"seconds":1783712815},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:48122","port":48122}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33731973-29f7-4265-a3d3-5b5709d5635f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45344","PortSpecifier":{"PortValue":45344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"714e8921-5e77-4f2f-aebd-8ee2634de501","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","object":"source:{address:{socket_address:{address:\"10.132.0.17:45344\" port_value:45344}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712815 nanos:274476851} http:{id:\"714e8921-5e77-4f2f-aebd-8ee2634de501\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"714e8921-5e77-4f2f-aebd-8ee2634de501\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JALILErs4bSddTXa_NrF5mLR6gTwpS6ZexdMKUHS37eYk49AxhXwwhY2NVlG"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","subscription":"e2e-rate-iso-a-ba45de","tenant":"e2e-shared-a-f25aa8","userId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"714e8921-5e77-4f2f-aebd-8ee2634de501"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"714e8921-5e77-4f2f-aebd-8ee2634de501","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":274476851,"seconds":1783712815}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45344},"address":"10.132.0.17:45344"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"714e8921-5e77-4f2f-aebd-8ee2634de501"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"714e8921-5e77-4f2f-aebd-8ee2634de501","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":274476851,"seconds":1783712815},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:45344","port":45344}}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba45de"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","selected_subscription":"e2e-rate-iso-a-ba45de","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-ba45de@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:46:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"714e8921-5e77-4f2f-aebd-8ee2634de501","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45360","PortSpecifier":{"PortValue":45360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","object":"source:{address:{socket_address:{address:\"10.132.0.17:45360\" port_value:45360}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712816 nanos:336807776} http:{id:\"5fdb8304-f4d1-44ab-9125-ffc9a90147cf\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5fdb8304-f4d1-44ab-9125-ffc9a90147cf\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JALILErs4bSddTXa_NrF5mLR6gTwpS6ZexdMKUHS37eYk49AxhXwwhY2NVlG"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","subscription":"e2e-rate-iso-a-ba45de","tenant":"e2e-shared-a-f25aa8","userId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":336807776,"seconds":1783712816}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45360},"address":"10.132.0.17:45360"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":336807776,"seconds":1783712816},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:45360","port":45360}}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba45de"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","selected_subscription":"e2e-rate-iso-a-ba45de","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-ba45de@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:46:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5fdb8304-f4d1-44ab-9125-ffc9a90147cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45370","PortSpecifier":{"PortValue":45370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","object":"source:{address:{socket_address:{address:\"10.132.0.17:45370\" port_value:45370}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712817 nanos:383551454} http:{id:\"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JALILErs4bSddTXa_NrF5mLR6gTwpS6ZexdMKUHS37eYk49AxhXwwhY2NVlG"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","subscription":"e2e-rate-iso-a-ba45de","tenant":"e2e-shared-a-f25aa8","userId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":383551454,"seconds":1783712817}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":45370},"address":"10.132.0.17:45370"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":383551454,"seconds":1783712817},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:45370","port":45370}}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ba45de"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cde47fe5-5015-4a1b-a8c1-07fcd6e490fa","keyName":"e2e-rate-a-ba45de","selected_subscription":"e2e-rate-iso-a-ba45de","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-ba45de@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ba45de","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:46:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad6a9a0f-5baa-4f30-ad48-4dd7e4173a14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53822","PortSpecifier":{"PortValue":53822}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","object":"source:{address:{socket_address:{address:\"10.132.0.17:53822\" port_value:53822}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712825 nanos:965716498} http:{id:\"4e8eb5af-b912-4742-9e84-0b930e0f3707\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4e8eb5af-b912-4742-9e84-0b930e0f3707\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e8eb5af-b912-4742-9e84-0b930e0f3707"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":965716498,"seconds":1783712825}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53822},"address":"10.132.0.17:53822"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4e8eb5af-b912-4742-9e84-0b930e0f3707"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":965716498,"seconds":1783712825},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53822","port":53822}}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e8eb5af-b912-4742-9e84-0b930e0f3707","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33078","PortSpecifier":{"PortValue":33078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","object":"source:{address:{socket_address:{address:\"10.132.0.17:33078\" port_value:33078}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712826 nanos:5098052} http:{id:\"2c31c019-9d26-4a64-83fc-8586c7482aa7\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2c31c019-9d26-4a64-83fc-8586c7482aa7\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/6a0504efd1b3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6341334e-ab6d-4189-84ad-fff93156d3e8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"27feb646-9038-43d6-8f96-2b55a2083d2c","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.32:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2c31c019-9d26-4a64-83fc-8586c7482aa7"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":5098052,"seconds":1783712826}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33078},"address":"10.132.0.17:33078"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2c31c019-9d26-4a64-83fc-8586c7482aa7"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":5098052,"seconds":1783712826},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:33078","port":33078}}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c31c019-9d26-4a64-83fc-8586c7482aa7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53834","PortSpecifier":{"PortValue":53834}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","object":"source:{address:{socket_address:{address:\"10.132.0.17:53834\" port_value:53834}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712826 nanos:40022139} http:{id:\"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X0JUKsEXssfg8Mlr_UVpXsUvWyU14KY10jQTJcSEalZgPLZqEhhjUQvfV5Cm"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","subscription":"e2e-rate-iso-a-1f3bf1","tenant":"e2e-shared-a-f25aa8","userId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdC01N2NkN2Q0YzRjLWNsYjR6CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1hLWYyNWFhOC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYS1mMjVhYTgtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":40022139,"seconds":1783712826}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53834},"address":"10.132.0.17:53834"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":40022139,"seconds":1783712826},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53834","port":53834}}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f3bf1"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","selected_subscription":"e2e-rate-iso-a-1f3bf1","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-1f3bf1@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af3fc17-acc2-4bdb-9a0c-fbe13728a0fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53846","PortSpecifier":{"PortValue":53846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","object":"source:{address:{socket_address:{address:\"10.132.0.17:53846\" port_value:53846}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712827 nanos:78886244} http:{id:\"6eda4098-8341-488a-8ab7-6c80e14e6adf\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6eda4098-8341-488a-8ab7-6c80e14e6adf\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X0JUKsEXssfg8Mlr_UVpXsUvWyU14KY10jQTJcSEalZgPLZqEhhjUQvfV5Cm"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","subscription":"e2e-rate-iso-a-1f3bf1","tenant":"e2e-shared-a-f25aa8","userId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6eda4098-8341-488a-8ab7-6c80e14e6adf"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":78886244,"seconds":1783712827}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53846},"address":"10.132.0.17:53846"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6eda4098-8341-488a-8ab7-6c80e14e6adf"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":78886244,"seconds":1783712827},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53846","port":53846}}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f3bf1"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","selected_subscription":"e2e-rate-iso-a-1f3bf1","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-1f3bf1@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6eda4098-8341-488a-8ab7-6c80e14e6adf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:53850","PortSpecifier":{"PortValue":53850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","object":"source:{address:{socket_address:{address:\"10.132.0.17:53850\" port_value:53850}}} destination:{address:{socket_address:{address:\"10.134.0.31:443\" port_value:443}}} request:{time:{seconds:1783712828 nanos:111732954} http:{id:\"528c3a4b-4b4c-4aab-b78e-011a8c706ab1\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"528c3a4b-4b4c-4aab-b78e-011a8c706ab1\"} path:\"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions\" host:\"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-X0JUKsEXssfg8Mlr_UVpXsUvWyU14KY10jQTJcSEalZgPLZqEhhjUQvfV5Cm"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","subscription":"e2e-rate-iso-a-1f3bf1","tenant":"e2e-shared-a-f25aa8","userId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f25aa8.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":111732954,"seconds":1783712828}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53850},"address":"10.132.0.17:53850"}}}}},"destination":{"address":"10.134.0.31:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"},"headers":{":authority":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-f25aa8-kserve-workload-svc.ai-tenant-e2e-shared-a-f25aa8.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.31~e2e-shared-a-f25aa8-openshift-default-57cd7d4c4c-clb4z.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1"},"host":"e2e-shared-a-f25aa8.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","method":"POST","path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":111732954,"seconds":1783712828},"url_path":"/ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:53850","port":53850}}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1f3bf1"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"16500c42-da76-4529-b8ed-39c9b9d26bc2","keyName":"e2e-rate-a-1f3bf1","selected_subscription":"e2e-rate-iso-a-1f3bf1","selected_subscription_key":"ai-tenant-e2e-shared-a-f25aa8/e2e-rate-iso-a-1f3bf1@ai-tenant-e2e-shared-a-f25aa8/rate-test-model-f25aa8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f25aa8","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1f3bf1","namespace":"ai-tenant-e2e-shared-a-f25aa8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528c3a4b-4b4c-4aab-b78e-011a8c706ab1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33084","PortSpecifier":{"PortValue":33084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.32:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","method":"POST","path":"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions","host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","object":"source:{address:{socket_address:{address:\"10.132.0.17:33084\" port_value:33084}}} destination:{address:{socket_address:{address:\"10.134.0.32:443\" port_value:443}}} request:{time:{seconds:1783712828 nanos:148767438} http:{id:\"4cb7c3ca-cd65-475b-bc9f-47833563ad4b\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-fc4b18-kserve-workload-svc.ai-tenant-e2e-shared-b-fc4b18.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.17\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"34.228.250.194,10.132.0.17\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"4cb7c3ca-cd65-475b-bc9f-47833563ad4b\"} path:\"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions\" host:\"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e\"} metadata_context:{}"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3EwKJ3o5uufLP8qW_PQVYJ3SOh4MgYorr3Xr2SY9wrg3rncj03kJN1kOHTMA"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1e303486-8ff1-4cf6-8ce3-81f38e51a45d","keyName":"e2e-rate-b-1f3bf1","subscription":"e2e-rate-iso-b-1f3bf1","tenant":"e2e-shared-b-fc4b18","userId":"1e303486-8ff1-4cf6-8ce3-81f38e51a45d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-fc4b18.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-fc4b18","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1f3bf1","namespace":"ai-tenant-e2e-shared-b-fc4b18","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-fc4b18-kserve-workload-svc.ai-tenant-e2e-shared-b-fc4b18.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","method":"POST","path":"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":148767438,"seconds":1783712828}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":33084},"address":"10.132.0.17:33084"}}}}},"destination":{"address":"10.134.0.32:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"},"headers":{":authority":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=34.228.250.194;host=e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-fc4b18-kserve-workload-svc.ai-tenant-e2e-shared-b-fc4b18.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.17","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.134.0.32~e2e-shared-b-fc4b18-openshift-default-6768769479-ffg8g.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"34.228.250.194,10.132.0.17","x-forwarded-host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b"},"host":"e2e-shared-b-fc4b18.apps.75f6e190-c7d4-4efc-9e21-6a0504efd1b3.prod.konfluxeaas.com","id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","method":"POST","path":"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":148767438,"seconds":1783712828},"url_path":"/ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.17:33084","port":33084}}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1f3bf1"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1e303486-8ff1-4cf6-8ce3-81f38e51a45d","keyName":"e2e-rate-b-1f3bf1","selected_subscription":"e2e-rate-iso-b-1f3bf1","selected_subscription_key":"ai-tenant-e2e-shared-b-fc4b18/e2e-rate-iso-b-1f3bf1@ai-tenant-e2e-shared-b-fc4b18/rate-test-model-fc4b18","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-fc4b18","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1f3bf1","namespace":"ai-tenant-e2e-shared-b-fc4b18","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T19:47:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4cb7c3ca-cd65-475b-bc9f-47833563ad4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/896fc54987785e3b017666927b59739bceb71515dc0ae8d5ca72f57a421c4cdc"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1843bb2a00214debb372839e2662f123df30b1acf565f688b7e1b341e689387a"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76f4cbab58188a14c8666b70d02ab07b86cc89e8d6c5897e003197e8d8913423"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a387073ee8da2d60ba76163c5a0e0f270feac69039bf14e2b09377dd4cd5b227"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5369513ce7fbe29edcced088b7ae7b14c6ee2892d57691ca81c821725c62f019"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7a4cf6bde1372087ad7f492046dd2cd1c44d09f2e25dacb41aae9280932a128"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d520901c1c156a4882986faad850080d6fb056dd713c971aada78933db4b82cd"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8546af3de8eea675903f4083e78e56a1f1f59e43335993dcb381a229f357e84"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29a61bb87b601f5ed8405a4829b63d7c52768cd652cf5e2a529acdebf1a1539e"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80916e6e25cb758d4f70b29da8e25a2875e35b178fed589bddce4026f853d44d"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17b637d5bb47df7a3fe3e30776e8cfa1c3e8d8a2cf3ce3954e20c2830743421e"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3201d36ab2fe83f5a3872afa4e087dcb246b003bcf8b5c7f81a30ab0aec4836"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/833282408a552064138d1fe0c32b64af7febd73cf45c8088b4338cc095ce9f34"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8238a26a13b99fc3ea2745653733eb28e59d1efe32a0cd0592502baba384070"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a08aff5b5420b71b7b816514eaa28e1dec83410edf6650284811f8885721f65a"}
{"level":"info","ts":"2026-07-10T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96f75ad515f83b01fe7ed11f9a840effed8ef3dac7b6e9b56395d9b8c9c296ba"}
{"level":"info","ts":"2026-07-10T19:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7030f969ba38be3c60097d6422edd71200c5c7a0124b04fec8dab99e029a20dc"}
{"level":"info","ts":"2026-07-10T19:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/386da1da7fbd968cfed981560462d1b0e91070345dcc903e613b44ae660b7f09"}
{"level":"info","ts":"2026-07-10T19:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85bbb28e97883f71560dabeefca887a302e21409c79caa94c6be4384702275de"}
{"level":"info","ts":"2026-07-10T19:47:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85acc8e1a6c328e6082ade3baf14f9ba05f6ab72071e77d37d0e4d378783e9b9"}
{"level":"info","ts":"2026-07-10T19:47:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c67dfda06df5cb0c554e5adc0ccf5182412d3895bc3affa257ff8fe2fd3ccc5"}
{"level":"info","ts":"2026-07-10T19:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/438f7791eb8e824a8e5965039525af5936f481119e1ee234dafc1777419d822c"}
{"level":"info","ts":"2026-07-10T19:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1095d0ffdbf5113171e1b45a7b16c9494d92f06cd967ab442ccc18bb1a445067"}
{"level":"info","ts":"2026-07-10T19:47:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af31c6a37537afd1b5a0be456cfc43086aaa725232b9b66815976fad322fb525"}