{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:53:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"error","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:53:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"error","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"}
{"level":"info","ts":"2026-07-13T21:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-13T21:54:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"info","ts":"2026-07-13T21:54:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"}
{"level":"info","ts":"2026-07-13T21:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"}
{"level":"info","ts":"2026-07-13T21:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27976e19-0d50-46a2-867a-885ef26b7a01","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55034","PortSpecifier":{"PortValue":55034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":598785353},"http":{"id":"27976e19-0d50-46a2-867a-885ef26b7a01","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27976e19-0d50-46a2-867a-885ef26b7a01","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52334","PortSpecifier":{"PortValue":52334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52334","PortSpecifier":{"PortValue":52334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":635872378},"http":{"id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501c0f00-2a8e-4b7d-a232-9bd63520eb45","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d64570-313f-4780-8102-40d319afe10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55046","PortSpecifier":{"PortValue":55046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9d64570-313f-4780-8102-40d319afe10f","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9d64570-313f-4780-8102-40d319afe10f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55046","PortSpecifier":{"PortValue":55046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979698,"nanos":669921437},"http":{"id":"f9d64570-313f-4780-8102-40d319afe10f","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9d64570-313f-4780-8102-40d319afe10f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9d64570-313f-4780-8102-40d319afe10f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d64570-313f-4780-8102-40d319afe10f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9d64570-313f-4780-8102-40d319afe10f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55062","PortSpecifier":{"PortValue":55062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55062","PortSpecifier":{"PortValue":55062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979699,"nanos":731219179},"http":{"id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:54:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c1e10da-63ad-47b8-829d-62df8d4345a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55066","PortSpecifier":{"PortValue":55066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55066","PortSpecifier":{"PortValue":55066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979700,"nanos":768952004},"http":{"id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7o1pLW17euaRkJVS_3iWw0OTCSZijHEetvz4y1QZNE4WsBE8Qr5TjPdcSUU1\"}"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","subscription":"e2e-rate-iso-a-9c8e9c","tenant":"e2e-shared-a-8e2974","userId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-9c8e9c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9c8e9c"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d43819f4-b469-4cbf-ab1f-5ebc56acf6a4","keyName":"e2e-rate-a-9c8e9c","selected_subscription":"e2e-rate-iso-a-9c8e9c","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-9c8e9c@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9c8e9c","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"05f08b7b-5410-48d6-aa5c-c400dd477cc7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39776","PortSpecifier":{"PortValue":39776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":875119393},"http":{"id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cd5b4b0-5854-42bc-afa2-fef67995198c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60434","PortSpecifier":{"PortValue":60434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":908449081},"http":{"id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"]}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/c5c88067cb0f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=817b74d9-4ac4-4f4d-b17a-056132976a9e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b62e8f90-7460-4bb9-9510-7f1180036f2d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09450818-4fc1-4eef-ac27-aeafe4d2937e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81a18dd0-c57a-4356-aed1-aec10518d514","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39780","PortSpecifier":{"PortValue":39780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979719,"nanos":954085495},"http":{"id":"81a18dd0-c57a-4356-aed1-aec10518d514","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81a18dd0-c57a-4356-aed1-aec10518d514","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39790","PortSpecifier":{"PortValue":39790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39790","PortSpecifier":{"PortValue":39790}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979720,"nanos":990496133},"http":{"id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"}
{"level":"debug","ts":"2026-07-13T21:55:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:55:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d78ef5d-d441-400b-abf4-0d8738b84f59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39802","PortSpecifier":{"PortValue":39802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2a15090-f836-490e-80d5-4bbd59545c1f","method":"POST","path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions","host":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:39802","PortSpecifier":{"PortValue":39802}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979722,"nanos":24045352},"http":{"id":"d2a15090-f836-490e-80d5-4bbd59545c1f","method":"POST","headers":{":authority":"e2e-shared-a-8e2974.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vl3NtQHfiHbGhp88_74pZBfzCaEzIgdg0BhGB55KJxtd6bkKtHfQBHVVNFHh\"}"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","subscription":"e2e-rate-iso-a-03c322","tenant":"e2e-shared-a-8e2974","userId":"55eabe2e-9719-4d09-a111-664538c68494","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\",\"requestedSubscription\":\"e2e-rate-iso-a-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8e2974.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-03c322"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55eabe2e-9719-4d09-a111-664538c68494","keyName":"e2e-rate-a-03c322","selected_subscription":"e2e-rate-iso-a-03c322","selected_subscription_key":"ai-tenant-e2e-shared-a-8e2974/e2e-rate-iso-a-03c322@ai-tenant-e2e-shared-a-8e2974/rate-test-model-8e2974","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8e2974","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-03c322","namespace":"ai-tenant-e2e-shared-a-8e2974","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2a15090-f836-490e-80d5-4bbd59545c1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60436","PortSpecifier":{"PortValue":60436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78422dd7-033d-4713-b703-c93eff859dc0","method":"POST","path":"/ai-tenant-e2e-shared-b-884921/rate-test-model-884921/v1/completions","host":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60436","PortSpecifier":{"PortValue":60436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783979722,"nanos":58433188},"http":{"id":"78422dd7-033d-4713-b703-c93eff859dc0","method":"POST","headers":{":authority":"e2e-shared-b-884921.apps.294019ed-43ef-46f4-a4ce-c5c88067cb0f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-884921/rate-test-model-884921/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-LnQzLPqpIRtko6yk_Wo9X07u1MW1M6EgQmsfZxnJzWmtZwhxQdR1yL9OU7zR"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-LnQzLPqpIRtko6yk_Wo9X07u1MW1M6EgQmsfZxnJzWmtZwhxQdR1yL9OU7zR\"}"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","keyName":"e2e-rate-b-03c322","subscription":"e2e-rate-iso-b-03c322","tenant":"e2e-shared-b-884921","userId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\",\"requestedSubscription\":\"e2e-rate-iso-b-03c322\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-884921.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-884921","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-03c322","namespace":"ai-tenant-e2e-shared-b-884921","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78422dd7-033d-4713-b703-c93eff859dc0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-884921/rate-test-model-884921\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-03c322"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78422dd7-033d-4713-b703-c93eff859dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9bd6e559-16c0-4d63-b2b1-9cd0d7affc08","keyName":"e2e-rate-b-03c322","selected_subscription":"e2e-rate-iso-b-03c322","selected_subscription_key":"ai-tenant-e2e-shared-b-884921/e2e-rate-iso-b-03c322@ai-tenant-e2e-shared-b-884921/rate-test-model-884921","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-884921","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-03c322","namespace":"ai-tenant-e2e-shared-b-884921","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78422dd7-033d-4713-b703-c93eff859dc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-13T21:55:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78422dd7-033d-4713-b703-c93eff859dc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63d22a632d565b81e66c2bd3987541cebcb00579635ce9bc25e1bfa22cb008e8"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c10c07b351be36e5dde755b6bcc8cff7198361e47237b63fb5e282a965ab22"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43a20a1a2d3fcc704a4a1e0f86d9efc2ba06e0f0333e5705592f8920362794c8"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d4f95d24c41058b1f35927f574ce762cda6df949757fe8e83f65a64bde52c12"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c82a891cbdf2bd849d194107bab0b8395b3e629ea1b6cb45e3180e70fb5e56f0"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d1bec6e8829fc8d29f2c64c6e514ab8aa1aad2ecf77437c6421fc0971515f0c9"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a25e2e1317d805f8e33f006891214628a48694b17b3f066113ea27ed0f3005a4"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e44e4af7af649fddca96a5066a040c1ab0d995cb1944e1b7e0f088606f4c069"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9128a210da07d7ffc14e5b259b6d1258d6b31b2995a15e3fecb9c2ac159c4446"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fb0137e5bd595a803a95a1e83c266a386dfbc91f102c161c55efcaedb0a997d"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35577edf4630bc48d06493e7281d83c6eb852165d309a44b184f6fc868204f81"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04b945cac04faba3e26bf6761cd60ace97350ba582ce5f68639e9d13817604a5"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ddf439da31a95eed789cc4080951b0c54179101505c1c74341d58ad75632dd"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b459e4e4da021b8e10954318368e9d1bae89a6f48d01d6c57ed0ee7918378830"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88a8adcafb9fab2dae0e03109552bd78f78311a155440b5a6b802ad8201f667f"}
{"level":"info","ts":"2026-07-13T21:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bd103f06a112f86835c9ee3e7306de3496700f2011513b30a27af7734882301"}
{"level":"info","ts":"2026-07-13T21:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/407be41904019b18b50107a0a97b06c04b484a47240e0d114cc0dd8717c86ffd"}
{"level":"info","ts":"2026-07-13T21:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/347d16811a3d165a7a404ac6723ca8ba73ef2c4756d6fb5e070867a32504d765"}
{"level":"info","ts":"2026-07-13T21:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b20bae1e4bd781d8950d5e72217c4e558adf27bdf23f993f25b5c17e51a311b3"}
{"level":"info","ts":"2026-07-13T21:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d85ea6aaa6a2ac5985407e9d46fe00a2bb4ba2e11ca2b8477df8f72c34b02b0d"}
{"level":"info","ts":"2026-07-13T21:56:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9c588a307ba8480921ac9347fd526993aa73c32e5e4813a434bd200d3c318e5"}
{"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59fd6f75af8efa0ea3c760437ac095201bc9397336cc36c830ee37a9f27524fb"}
{"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d99619663c9e99ed2b4eab5fdaa2776ae3cb7de53d501eed7801d313a819e5a"}
{"level":"info","ts":"2026-07-13T21:56:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3fff53257286e7107f76d02468c3f2017866329555fe3bc0bbeefe1dc4f44dc"}