{"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea252f2a9fa3725150cf6cb244c7055bdce2001501090eb38e91d9cdee6dccec"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:51:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:51:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84601aa6-0e3b-4688-8600-643aa733725a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35644","PortSpecifier":{"PortValue":35644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84601aa6-0e3b-4688-8600-643aa733725a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84601aa6-0e3b-4688-8600-643aa733725a","object":"source:{address:{socket_address:{address:\"10.134.0.13:35644\" port_value:35644}}} destination:{address:{socket_address:{address:\"10.133.0.56:443\" port_value:443}}} request:{time:{seconds:1785448330 nanos:700575574} http:{id:\"84601aa6-0e3b-4688-8600-643aa733725a\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"84601aa6-0e3b-4688-8600-643aa733725a\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"938fe34938b4be133d893fb3101a69008714f564f6cd1ed6b58c68bac7301823\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84601aa6-0e3b-4688-8600-643aa733725a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84601aa6-0e3b-4688-8600-643aa733725a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"938fe34938b4be133d893fb3101a69008714f564f6cd1ed6b58c68bac7301823"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"84601aa6-0e3b-4688-8600-643aa733725a"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"84601aa6-0e3b-4688-8600-643aa733725a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":700575574,"seconds":1785448330}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35644},"address":"10.134.0.13:35644"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"938fe34938b4be133d893fb3101a69008714f564f6cd1ed6b58c68bac7301823"},"headers":{":authority":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"84601aa6-0e3b-4688-8600-643aa733725a"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"84601aa6-0e3b-4688-8600-643aa733725a","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":700575574,"seconds":1785448330},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:35644","port":35644}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84601aa6-0e3b-4688-8600-643aa733725a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84601aa6-0e3b-4688-8600-643aa733725a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84601aa6-0e3b-4688-8600-643aa733725a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53966","PortSpecifier":{"PortValue":53966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","object":"source:{address:{socket_address:{address:\"10.134.0.13:53966\" port_value:53966}}} destination:{address:{socket_address:{address:\"10.133.0.57:443\" port_value:443}}} request:{time:{seconds:1785448330 nanos:738826965} http:{id:\"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0"},"host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":738826965,"seconds":1785448330}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53966},"address":"10.134.0.13:53966"}}}}},"destination":{"address":"10.133.0.57:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"},"headers":{":authority":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0"},"host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":738826965,"seconds":1785448330},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:53966","port":53966}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-592c1e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17d54f8-0ea6-4ce9-9768-f1521e03d2c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35656","PortSpecifier":{"PortValue":35656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","object":"source:{address:{socket_address:{address:\"10.134.0.13:35656\" port_value:35656}}} destination:{address:{socket_address:{address:\"10.133.0.56:443\" port_value:443}}} request:{time:{seconds:1785448330 nanos:782234017} http:{id:\"e20cd543-1aa5-4316-822c-39b0d65afdcf\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yYWJlNTItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTJhYmU1Mi1vcGVuc2hpZnQtZGVmYXVsdC01NjU0ZjVjNGQtamt4c2oKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtMmFiZTUyLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTJhYmU1Mi1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"e20cd543-1aa5-4316-822c-39b0d65afdcf\"} path:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\" host:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MSsLoIdwN4ttXxmf_vqX3l3ShkglF7c44XxzLeHJx8DNgRWkRwYYSHpvidMo"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","subscription":"e2e-rate-iso-a-1bef83","tenant":"e2e-shared-a-2abe52","userId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e20cd543-1aa5-4316-822c-39b0d65afdcf"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":782234017,"seconds":1785448330}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35656},"address":"10.134.0.13:35656"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb"},"headers":{":authority":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"e20cd543-1aa5-4316-822c-39b0d65afdcf"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":782234017,"seconds":1785448330},"url_path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:35656","port":35656}}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1bef83"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","selected_subscription":"e2e-rate-iso-a-1bef83","selected_subscription_key":"ai-tenant-e2e-shared-a-2abe52/e2e-rate-iso-a-1bef83@ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e20cd543-1aa5-4316-822c-39b0d65afdcf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35672","PortSpecifier":{"PortValue":35672}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","object":"source:{address:{socket_address:{address:\"10.134.0.13:35672\" port_value:35672}}} destination:{address:{socket_address:{address:\"10.133.0.56:443\" port_value:443}}} request:{time:{seconds:1785448331 nanos:820281623} http:{id:\"4f2a9e40-bc01-49bf-b5a8-2113cac794fb\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4f2a9e40-bc01-49bf-b5a8-2113cac794fb\"} path:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\" host:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MSsLoIdwN4ttXxmf_vqX3l3ShkglF7c44XxzLeHJx8DNgRWkRwYYSHpvidMo"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","subscription":"e2e-rate-iso-a-1bef83","tenant":"e2e-shared-a-2abe52","userId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":820281623,"seconds":1785448331}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35672},"address":"10.134.0.13:35672"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb"},"headers":{":authority":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":820281623,"seconds":1785448331},"url_path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:35672","port":35672}}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1bef83"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","selected_subscription":"e2e-rate-iso-a-1bef83","selected_subscription_key":"ai-tenant-e2e-shared-a-2abe52/e2e-rate-iso-a-1bef83@ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f2a9e40-bc01-49bf-b5a8-2113cac794fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee1b6df-a84f-4021-8dfa-156717316501","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:35678","PortSpecifier":{"PortValue":35678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dee1b6df-a84f-4021-8dfa-156717316501","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dee1b6df-a84f-4021-8dfa-156717316501","object":"source:{address:{socket_address:{address:\"10.134.0.13:35678\" port_value:35678}}} destination:{address:{socket_address:{address:\"10.133.0.56:443\" port_value:443}}} request:{time:{seconds:1785448332 nanos:877394177} http:{id:\"dee1b6df-a84f-4021-8dfa-156717316501\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS0yYWJlNTItb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTJhYmU1Mi1vcGVuc2hpZnQtZGVmYXVsdC01NjU0ZjVjNGQtamt4c2oKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtMmFiZTUyLW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTJhYmU1Mi1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"dee1b6df-a84f-4021-8dfa-156717316501\"} path:\"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions\" host:\"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MSsLoIdwN4ttXxmf_vqX3l3ShkglF7c44XxzLeHJx8DNgRWkRwYYSHpvidMo"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","subscription":"e2e-rate-iso-a-1bef83","tenant":"e2e-shared-a-2abe52","userId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2abe52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dee1b6df-a84f-4021-8dfa-156717316501","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"dee1b6df-a84f-4021-8dfa-156717316501"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"dee1b6df-a84f-4021-8dfa-156717316501","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":877394177,"seconds":1785448332}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":35678},"address":"10.134.0.13:35678"}}}}},"destination":{"address":"10.133.0.56:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb"},"headers":{":authority":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-2abe52-kserve-workload-svc.ai-tenant-e2e-shared-a-2abe52.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.56~e2e-shared-a-2abe52-openshift-default-5654f5c4d-jkxsj.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"dee1b6df-a84f-4021-8dfa-156717316501"},"host":"e2e-shared-a-2abe52.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"dee1b6df-a84f-4021-8dfa-156717316501","method":"POST","path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":877394177,"seconds":1785448332},"url_path":"/ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:35678","port":35678}}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1bef83"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dee1b6df-a84f-4021-8dfa-156717316501","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55247bc7-3300-4ef6-8e04-5514d9ff43b2","keyName":"e2e-rate-a-1bef83","selected_subscription":"e2e-rate-iso-a-1bef83","selected_subscription_key":"ai-tenant-e2e-shared-a-2abe52/e2e-rate-iso-a-1bef83@ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-2abe52/models/facebook/opt-125m","name":"rate-test-model-2abe52","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1bef83","namespace":"ai-tenant-e2e-shared-a-2abe52","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-2abe52/rate-test-model-2abe52"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee1b6df-a84f-4021-8dfa-156717316501","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dee1b6df-a84f-4021-8dfa-156717316501","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:53976","PortSpecifier":{"PortValue":53976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e058330-4397-4dc2-b2ef-4abc04e157df","method":"POST","path":"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions","host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","object":"source:{address:{socket_address:{address:\"10.134.0.13:53976\" port_value:53976}}} destination:{address:{socket_address:{address:\"10.133.0.57:443\" port_value:443}}} request:{time:{seconds:1785448332 nanos:922274939} http:{id:\"8e058330-4397-4dc2-b2ef-4abc04e157df\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-592c1e-kserve-workload-svc.ai-tenant-e2e-shared-b-592c1e.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"8e058330-4397-4dc2-b2ef-4abc04e157df\"} path:\"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions\" host:\"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"85940fb488f1b2347398a0463dadf8484a1e83e19ee1c90e391dee20cda4400a\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WovJB2Q1ANM4Y4Z2_j4jrlA9gvOiJoQtDqLQPTIWc55mqCiUfGtD8HBqedmF"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b1ca0239-6d44-4485-8679-4ad880a6ca7d","keyName":"e2e-rate-b-1bef83","subscription":"e2e-rate-iso-b-1bef83","tenant":"e2e-shared-b-592c1e","userId":"b1ca0239-6d44-4485-8679-4ad880a6ca7d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-592c1e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-592c1e/models/facebook/opt-125m","name":"rate-test-model-592c1e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1bef83","namespace":"ai-tenant-e2e-shared-b-592c1e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e"}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-592c1e-kserve-workload-svc.ai-tenant-e2e-shared-b-592c1e.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8e058330-4397-4dc2-b2ef-4abc04e157df"},"host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"8e058330-4397-4dc2-b2ef-4abc04e157df","method":"POST","path":"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":922274939,"seconds":1785448332}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":53976},"address":"10.134.0.13:53976"}}}}},"destination":{"address":"10.133.0.57:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"85940fb488f1b2347398a0463dadf8484a1e83e19ee1c90e391dee20cda4400a"},"headers":{":authority":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-592c1e-kserve-workload-svc.ai-tenant-e2e-shared-b-592c1e.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi01OTJjMWUtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTU5MmMxZS1vcGVuc2hpZnQtZGVmYXVsdC02Yzk4Y2Q1Y2I4LWw5eHFuCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTU5MmMxZS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi01OTJjMWUtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.133.0.57~e2e-shared-b-592c1e-openshift-default-6c98cd5cb8-l9xqn.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"8e058330-4397-4dc2-b2ef-4abc04e157df"},"host":"e2e-shared-b-592c1e.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"8e058330-4397-4dc2-b2ef-4abc04e157df","method":"POST","path":"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":922274939,"seconds":1785448332},"url_path":"/ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:53976","port":53976}}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-592c1e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1bef83"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b1ca0239-6d44-4485-8679-4ad880a6ca7d","keyName":"e2e-rate-b-1bef83","selected_subscription":"e2e-rate-iso-b-1bef83","selected_subscription_key":"ai-tenant-e2e-shared-b-592c1e/e2e-rate-iso-b-1bef83@ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-592c1e/models/facebook/opt-125m","name":"rate-test-model-592c1e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1bef83","namespace":"ai-tenant-e2e-shared-b-592c1e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-592c1e/rate-test-model-592c1e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:52:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e058330-4397-4dc2-b2ef-4abc04e157df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1f3c4eccf892a03952c114741c97d7281b935c0000604d73d8423624c651ddc"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eae8aed4f334a63c1bb18a2a81d8a187f6ad72ddfba21381f4a91c916ff2b90"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb67a9e2803a904fa7eed87b2038a97001c2a311e4ff6c1474ed790af6295ba2"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c02b6e4fbb95d11fa8bbf9298d907627389f89ce6a8b3cbf08ed8dacb57444f"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7c5c00898b7cc0731e9abb8e9862891e535f51b3f40456531a6eff50d9a4a2e"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aab082ddde0de1c045be99971ac380b1d05fe45a5fb908e29bc8667b5fb9baf3"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3a96366a4c0080cf62945e7e4fda87b4fbc7a602f8cf09a49360b8290bfb1a0"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc403e18debc051e249e22ed1bbc238cd2a229669688630a708e7c52d03af0f7"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ce09b646212cc8f410399a54ee8386354340e63822516f7b16db98d2160b1eb"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90143a39555148da0bd24f48070e651a954bde1ac2d91ae9b825994af086fd2a"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f6c26de70bb4b5b4e86fe16d790932aac54bbc062f71b7b870dc1a45f9e5c2e"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea252f2a9fa3725150cf6cb244c7055bdce2001501090eb38e91d9cdee6dccec"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5869598d35fa8b8a6425cbdf941c2cd3a16a66ee08318851eb212e0a1854f01f"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70713884fd4840085f20c7cef977eba2dca6a2811bc3520630c8fa16d1a637fa"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/689a8e056164c50a9da43487c132cc603795d0345210f2e4f7e63a9394eb105d"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52a4e9645375b5cd0c7ba2a8478bf4ea4af392110aa06a9b85ca510da1ca8115"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/938fe34938b4be133d893fb3101a69008714f564f6cd1ed6b58c68bac7301823"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bb04df03ff442c4ba7c8f5a1a67f4c376783550ec231b61feda6d93505141cb"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e0e383e5d8e6a0e2c9a982f5e68aea47cf78ae932e48ddc06303eee02c926b1"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191e15feacecd69154e980b7afc947a203eefc3823248d3820704cf8babaea80"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db34b12707148b31abe3b6921b06cf85d10beeb155b3e4cc05faa10cfdf35be2"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8d81a1dac20551ba6a1734af8920f40f6e667b99fb0e5669e413fd6bdd36c12"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85940fb488f1b2347398a0463dadf8484a1e83e19ee1c90e391dee20cda4400a"} {"level":"info","ts":"2026-07-30T21:52:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a7e7daa24b11fc79f2d0f13a7678fe2a1df8a9628bf7891e4fd27e94e6c709e"} {"level":"info","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54658","PortSpecifier":{"PortValue":54658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a653d8a1-6821-4ebf-8493-ddf36c673737","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","object":"source:{address:{socket_address:{address:\"10.134.0.13:54658\" port_value:54658}}} destination:{address:{socket_address:{address:\"10.133.0.40:443\" port_value:443}}} request:{time:{seconds:1785448421 nanos:673286729} http:{id:\"a653d8a1-6821-4ebf-8493-ddf36c673737\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a653d8a1-6821-4ebf-8493-ddf36c673737\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a653d8a1-6821-4ebf-8493-ddf36c673737"},"host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"a653d8a1-6821-4ebf-8493-ddf36c673737","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":673286729,"seconds":1785448421}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54658},"address":"10.134.0.13:54658"}}}}},"destination":{"address":"10.133.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC03OGJiNzhmZjc4LXM4NjY3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a653d8a1-6821-4ebf-8493-ddf36c673737"},"host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"a653d8a1-6821-4ebf-8493-ddf36c673737","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":673286729,"seconds":1785448421},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:54658","port":54658}}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a653d8a1-6821-4ebf-8493-ddf36c673737","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:54660","PortSpecifier":{"PortValue":54660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4191fb21-3108-4ef2-a77c-783e83fbc308","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","object":"source:{address:{socket_address:{address:\"10.134.0.13:54660\" port_value:54660}}} destination:{address:{socket_address:{address:\"10.133.0.40:443\" port_value:443}}} request:{time:{seconds:1785448421 nanos:732529030} http:{id:\"4191fb21-3108-4ef2-a77c-783e83fbc308\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"4191fb21-3108-4ef2-a77c-783e83fbc308\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FWxFskG0T6X9cixT_6pI8BejG7xSWVJNL2qOHnwacM3KJbCs3Nf6C5WCAcLp"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c7f4a5a5-f329-4e5a-98fa-ff8d4644af93","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"c7f4a5a5-f329-4e5a-98fa-ff8d4644af93","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4191fb21-3108-4ef2-a77c-783e83fbc308"},"host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"4191fb21-3108-4ef2-a77c-783e83fbc308","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":732529030,"seconds":1785448421}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":54660},"address":"10.134.0.13:54660"}}}}},"destination":{"address":"10.133.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.40~maas-default-gateway-openshift-default-78bb78ff78-s8667.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"4191fb21-3108-4ef2-a77c-783e83fbc308"},"host":"maas.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"4191fb21-3108-4ef2-a77c-783e83fbc308","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":732529030,"seconds":1785448421},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:54660","port":54660}}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c7f4a5a5-f329-4e5a-98fa-ff8d4644af93","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4191fb21-3108-4ef2-a77c-783e83fbc308","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200"} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200"} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200"} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de"} {"level":"error","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de"} {"level":"error","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"} {"level":"error","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-30T21:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642"} {"level":"info","ts":"2026-07-30T21:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453"} {"level":"info","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49338","PortSpecifier":{"PortValue":49338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","object":"source:{address:{socket_address:{address:\"10.134.0.13:49338\" port_value:49338}}} destination:{address:{socket_address:{address:\"10.133.0.59:443\" port_value:443}}} request:{time:{seconds:1785448464 nanos:439950485} http:{id:\"a966d822-bda1-4f4f-9c78-ed8ca566f9a3\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"a966d822-bda1-4f4f-9c78-ed8ca566f9a3\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e0bf62cc3a0e"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8f28bf6b-a4bc-4043-aeef-3c304794b452"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce753a89-1ddd-47f6-bc7e-7de069a907a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3"},"host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":439950485,"seconds":1785448464}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49338},"address":"10.134.0.13:49338"}}}}},"destination":{"address":"10.133.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"},"headers":{":authority":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3"},"host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":439950485,"seconds":1785448464},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:49338","port":49338}}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-df94bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:54:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a966d822-bda1-4f4f-9c78-ed8ca566f9a3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.13:49344","PortSpecifier":{"PortValue":49344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","method":"POST","path":"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions","host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","object":"source:{address:{socket_address:{address:\"10.134.0.13:49344\" port_value:49344}}} destination:{address:{socket_address:{address:\"10.133.0.59:443\" port_value:443}}} request:{time:{seconds:1785448466 nanos:501048742} http:{id:\"db384344-5bf8-4dfe-9caa-29a3c6120dd9\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-df94bf-kserve-workload-svc.ai-tenant-e2e-ipp-a-df94bf.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.134.0.13\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.134.0.13\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"db384344-5bf8-4dfe-9caa-29a3c6120dd9\"} path:\"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions\" host:\"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1\"} metadata_context:{}"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rMcPsXJIuaBrOcq6_tObXirKnnjPO9OKlZT8fXzj2iNEvwfmTvb27LThfwJg"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5bddb8f6-c70f-4c1b-af2f-5afb08cbee7e","keyName":"e2e-ipp-df94bf","subscription":"ipp-route-df94bf-sub","tenant":"e2e-ipp-a-df94bf","userId":"5bddb8f6-c70f-4c1b-af2f-5afb08cbee7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-df94bf.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-df94bf/models/facebook/opt-125m","name":"ipp-route-df94bf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-df94bf-sub","namespace":"ai-tenant-e2e-ipp-a-df94bf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf"}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-df94bf-kserve-workload-svc.ai-tenant-e2e-ipp-a-df94bf.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9"},"host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","method":"POST","path":"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":501048742,"seconds":1785448466}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":49344},"address":"10.134.0.13:49344"}}}}},"destination":{"address":"10.133.0.59:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"},"headers":{":authority":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-df94bf-kserve-workload-svc.ai-tenant-e2e-ipp-a-df94bf.svc.cluster.local:8000/*","x-envoy-external-address":"10.134.0.13","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1kZjk0YmYtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CjwKBE5BTUUSNBoyZTJlLWlwcC1hLWRmOTRiZi1vcGVuc2hpZnQtZGVmYXVsdC05NTdjOGZjOGQtc2o1eDUKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnAKBU9XTkVSEmcaZWt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtaXBwLWEtZGY5NGJmLW9wZW5zaGlmdC1kZWZhdWx0CjUKDVdPUktMT0FEX05BTUUSJBoiZTJlLWlwcC1hLWRmOTRiZi1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.59~e2e-ipp-a-df94bf-openshift-default-957c8fc8d-sj5x5.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.134.0.13","x-forwarded-host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9"},"host":"e2e-ipp-a-df94bf.apps.14fac3a5-5ca8-4133-bd6d-e0bf62cc3a0e.prod.konfluxeaas.com","id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","method":"POST","path":"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":501048742,"seconds":1785448466},"url_path":"/ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.134.0.13:49344","port":49344}}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-df94bf/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-df94bf-sub"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5bddb8f6-c70f-4c1b-af2f-5afb08cbee7e","keyName":"e2e-ipp-df94bf","selected_subscription":"ipp-route-df94bf-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf-sub@ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-df94bf/models/facebook/opt-125m","name":"ipp-route-df94bf","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-df94bf-sub","namespace":"ai-tenant-e2e-ipp-a-df94bf","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-df94bf/ipp-route-df94bf"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-30T21:54:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db384344-5bf8-4dfe-9caa-29a3c6120dd9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39996e21f823074ef43336914539d5162785bf3c2fba2aa3b7281feb4322106e"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef7c6887fe38d48047769c518bd2bab4d65f119af34acfad8bbfee7b4527c15f"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/649a2bebd26913ae6b866887501d5498566221334b05ba4346951fb8d66736df"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77ffc2b775588b0a7a9015e3575c05099773cafb0d6b12403add4131af1ba642"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18ac4fa7d3605cf5e9b6e07b2d9c9eb068630bbd28665217e0e838deb40ecbf3"} {"level":"info","ts":"2026-07-30T21:55:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af39c0a5b4032d8fe7a1abc3093b89432fbe66f5f2b2b2e84ed3412edd875de1"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55b6ece40f5bd9a82a5b1428b0fb832632cf8216bfcd03cd022cfed7d5070453"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ce7893351775e51bfecbea4dc95c1c61c7e01e077bf76db849e80b4d648a6f"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3aa16536159e49a628e3a0240de445f46ce0b2f3578da5d7474823743f3588de"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c36c0141a9fe1095f9d63f1f6efc0bc811e02fc33a4339f02fd38b15418bd200"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3206b909b0747713174e63386c70646cc74bf0ee66e910718f945508e2e0cc0e"} {"level":"info","ts":"2026-07-30T21:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab61c0aae1cc3350425bdacd76b0c5e2e171965b41138438ccb357afe9f224d"}