{"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"} {"level":"info","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090"} {"level":"error","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090"} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"error","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:56:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6f87251-2764-4258-8da7-f51548a0c357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52892","PortSpecifier":{"PortValue":52892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6f87251-2764-4258-8da7-f51548a0c357","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6f87251-2764-4258-8da7-f51548a0c357","object":"source:{address:{socket_address:{address:\"10.132.0.15:52892\" port_value:52892}}} destination:{address:{socket_address:{address:\"10.132.0.62:443\" port_value:443}}} request:{time:{seconds:1785959765 nanos:990112682} http:{id:\"f6f87251-2764-4258-8da7-f51548a0c357\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"f6f87251-2764-4258-8da7-f51548a0c357\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"8d3830821cd68cccc55437cb320896a82bb507c0b2e5856a7a5a59af7d2e2af8\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6f87251-2764-4258-8da7-f51548a0c357","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6f87251-2764-4258-8da7-f51548a0c357","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8d3830821cd68cccc55437cb320896a82bb507c0b2e5856a7a5a59af7d2e2af8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f6f87251-2764-4258-8da7-f51548a0c357"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"f6f87251-2764-4258-8da7-f51548a0c357","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":990112682,"seconds":1785959765}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52892},"address":"10.132.0.15:52892"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"8d3830821cd68cccc55437cb320896a82bb507c0b2e5856a7a5a59af7d2e2af8"},"headers":{":authority":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"f6f87251-2764-4258-8da7-f51548a0c357"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"f6f87251-2764-4258-8da7-f51548a0c357","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":990112682,"seconds":1785959765},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:52892","port":52892}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6f87251-2764-4258-8da7-f51548a0c357","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6f87251-2764-4258-8da7-f51548a0c357","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6f87251-2764-4258-8da7-f51548a0c357","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b778946-d7aa-4ca5-844d-04df17531395","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58142","PortSpecifier":{"PortValue":58142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b778946-d7aa-4ca5-844d-04df17531395","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b778946-d7aa-4ca5-844d-04df17531395","object":"source:{address:{socket_address:{address:\"10.132.0.15:58142\" port_value:58142}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785959766 nanos:28460199} http:{id:\"6b778946-d7aa-4ca5-844d-04df17531395\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"70\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"6b778946-d7aa-4ca5-844d-04df17531395\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"2823306642b3537db723c33a96e21bd0b5919fd32eedace83951d4c70c7d7675\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b778946-d7aa-4ca5-844d-04df17531395","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b778946-d7aa-4ca5-844d-04df17531395","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2823306642b3537db723c33a96e21bd0b5919fd32eedace83951d4c70c7d7675"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.63:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6b778946-d7aa-4ca5-844d-04df17531395"},"host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"6b778946-d7aa-4ca5-844d-04df17531395","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":28460199,"seconds":1785959766}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58142},"address":"10.132.0.15:58142"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"2823306642b3537db723c33a96e21bd0b5919fd32eedace83951d4c70c7d7675"},"headers":{":authority":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"6b778946-d7aa-4ca5-844d-04df17531395"},"host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"6b778946-d7aa-4ca5-844d-04df17531395","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":28460199,"seconds":1785959766},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:58142","port":58142}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1df35a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b778946-d7aa-4ca5-844d-04df17531395","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b778946-d7aa-4ca5-844d-04df17531395","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b778946-d7aa-4ca5-844d-04df17531395","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52900","PortSpecifier":{"PortValue":52900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","object":"source:{address:{socket_address:{address:\"10.132.0.15:52900\" port_value:52900}}} destination:{address:{socket_address:{address:\"10.132.0.62:443\" port_value:443}}} request:{time:{seconds:1785959766 nanos:66291543} http:{id:\"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40\"} path:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\" host:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G3PUsNR5XOosCrRW_6pu4hmqOeEzw5SU1XTi8mMvI4bejzG5K1rWOLxOLNKu"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","subscription":"e2e-rate-iso-a-d10fbb","tenant":"e2e-shared-a-6a2d7d","userId":"e584271b-9e13-4472-b6fc-b55f5879d459","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":66291543,"seconds":1785959766}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52900},"address":"10.132.0.15:52900"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55"},"headers":{":authority":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":66291543,"seconds":1785959766},"url_path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:52900","port":52900}}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d10fbb"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","selected_subscription":"e2e-rate-iso-a-d10fbb","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2d7d/e2e-rate-iso-a-d10fbb@ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e6f2ca1-ddc2-4a20-93b2-2b6af86e5b40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52912","PortSpecifier":{"PortValue":52912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","object":"source:{address:{socket_address:{address:\"10.132.0.15:52912\" port_value:52912}}} destination:{address:{socket_address:{address:\"10.132.0.62:443\" port_value:443}}} request:{time:{seconds:1785959767 nanos:114636791} http:{id:\"101f7271-6839-493c-9dbd-7b195bcdb8d5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS02YTJkN2Qtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj4KBE5BTUUSNho0ZTJlLXNoYXJlZC1hLTZhMmQ3ZC1vcGVuc2hpZnQtZGVmYXVsdC03NTc5YjU5Yi1nNnNzcAogCglOQU1FU1BBQ0USExoRb3BlbnNoaWZ0LWluZ3Jlc3MKcwoFT1dORVISahpoa3ViZXJuZXRlczovL2FwaXMvYXBwcy92MS9uYW1lc3BhY2VzL29wZW5zaGlmdC1pbmdyZXNzL2RlcGxveW1lbnRzL2UyZS1zaGFyZWQtYS02YTJkN2Qtb3BlbnNoaWZ0LWRlZmF1bHQKOAoNV09SS0xPQURfTkFNRRInGiVlMmUtc2hhcmVkLWEtNmEyZDdkLW9wZW5zaGlmdC1kZWZhdWx0\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"101f7271-6839-493c-9dbd-7b195bcdb8d5\"} path:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\" host:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G3PUsNR5XOosCrRW_6pu4hmqOeEzw5SU1XTi8mMvI4bejzG5K1rWOLxOLNKu"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","subscription":"e2e-rate-iso-a-d10fbb","tenant":"e2e-shared-a-6a2d7d","userId":"e584271b-9e13-4472-b6fc-b55f5879d459","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"101f7271-6839-493c-9dbd-7b195bcdb8d5"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":114636791,"seconds":1785959767}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52912},"address":"10.132.0.15:52912"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55"},"headers":{":authority":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"101f7271-6839-493c-9dbd-7b195bcdb8d5"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":114636791,"seconds":1785959767},"url_path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:52912","port":52912}}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d10fbb"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","selected_subscription":"e2e-rate-iso-a-d10fbb","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2d7d/e2e-rate-iso-a-d10fbb@ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"101f7271-6839-493c-9dbd-7b195bcdb8d5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d767efd8-b79d-4058-a683-a8e62288022d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:52924","PortSpecifier":{"PortValue":52924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d767efd8-b79d-4058-a683-a8e62288022d","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d767efd8-b79d-4058-a683-a8e62288022d","object":"source:{address:{socket_address:{address:\"10.132.0.15:52924\" port_value:52924}}} destination:{address:{socket_address:{address:\"10.132.0.62:443\" port_value:443}}} request:{time:{seconds:1785959768 nanos:163865036} http:{id:\"d767efd8-b79d-4058-a683-a8e62288022d\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"d767efd8-b79d-4058-a683-a8e62288022d\"} path:\"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions\" host:\"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-G3PUsNR5XOosCrRW_6pu4hmqOeEzw5SU1XTi8mMvI4bejzG5K1rWOLxOLNKu"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","subscription":"e2e-rate-iso-a-d10fbb","tenant":"e2e-shared-a-6a2d7d","userId":"e584271b-9e13-4472-b6fc-b55f5879d459","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6a2d7d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d767efd8-b79d-4058-a683-a8e62288022d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d767efd8-b79d-4058-a683-a8e62288022d"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"d767efd8-b79d-4058-a683-a8e62288022d","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":163865036,"seconds":1785959768}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":52924},"address":"10.132.0.15:52924"}}}}},"destination":{"address":"10.132.0.62:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55"},"headers":{":authority":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6a2d7d-kserve-workload-svc.ai-tenant-e2e-shared-a-6a2d7d.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.62~e2e-shared-a-6a2d7d-openshift-default-7579b59b-g6ssp.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d767efd8-b79d-4058-a683-a8e62288022d"},"host":"e2e-shared-a-6a2d7d.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"d767efd8-b79d-4058-a683-a8e62288022d","method":"POST","path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":163865036,"seconds":1785959768},"url_path":"/ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:52924","port":52924}}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d10fbb"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d767efd8-b79d-4058-a683-a8e62288022d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e584271b-9e13-4472-b6fc-b55f5879d459","keyName":"e2e-rate-a-d10fbb","selected_subscription":"e2e-rate-iso-a-d10fbb","selected_subscription_key":"ai-tenant-e2e-shared-a-6a2d7d/e2e-rate-iso-a-d10fbb@ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-6a2d7d/models/facebook/opt-125m","name":"rate-test-model-6a2d7d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d10fbb","namespace":"ai-tenant-e2e-shared-a-6a2d7d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-6a2d7d/rate-test-model-6a2d7d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d767efd8-b79d-4058-a683-a8e62288022d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d767efd8-b79d-4058-a683-a8e62288022d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:58150","PortSpecifier":{"PortValue":58150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.63:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16362a98-926d-4d5a-b4ef-6bde110b580c","method":"POST","path":"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions","host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","object":"source:{address:{socket_address:{address:\"10.132.0.15:58150\" port_value:58150}}} destination:{address:{socket_address:{address:\"10.132.0.63:443\" port_value:443}}} request:{time:{seconds:1785959768 nanos:200414899} http:{id:\"16362a98-926d-4d5a-b4ef-6bde110b580c\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"rate-test-model-1df35a-kserve-workload-svc.ai-tenant-e2e-shared-b-1df35a.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0xZGYzNWEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTFkZjM1YS1vcGVuc2hpZnQtZGVmYXVsdC01NGI2ZmM0OTY0LXNjeDU3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTFkZjM1YS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0xZGYzNWEtb3BlbnNoaWZ0LWRlZmF1bHQ=\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"16362a98-926d-4d5a-b4ef-6bde110b580c\"} path:\"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions\" host:\"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1WO7SBpqI1ocCGACH_wHVkqMSxreV4D9QsCfhzL8MznX0Pjb6xfD3HAguKsfG"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"85f6e16d-6250-45ba-a2dd-93b05c233658","keyName":"e2e-rate-b-d10fbb","subscription":"e2e-rate-iso-b-d10fbb","tenant":"e2e-shared-b-1df35a","userId":"85f6e16d-6250-45ba-a2dd-93b05c233658","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-1df35a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1df35a/models/facebook/opt-125m","name":"rate-test-model-1df35a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d10fbb","namespace":"ai-tenant-e2e-shared-b-1df35a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a"}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1df35a-kserve-workload-svc.ai-tenant-e2e-shared-b-1df35a.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"16362a98-926d-4d5a-b4ef-6bde110b580c"},"host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"16362a98-926d-4d5a-b4ef-6bde110b580c","method":"POST","path":"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":200414899,"seconds":1785959768}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58150},"address":"10.132.0.15:58150"}}}}},"destination":{"address":"10.132.0.63:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"},"headers":{":authority":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-1df35a-kserve-workload-svc.ai-tenant-e2e-shared-b-1df35a.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi0xZGYzNWEtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTFkZjM1YS1vcGVuc2hpZnQtZGVmYXVsdC01NGI2ZmM0OTY0LXNjeDU3CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTFkZjM1YS1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi0xZGYzNWEtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.63~e2e-shared-b-1df35a-openshift-default-54b6fc4964-scx57.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"16362a98-926d-4d5a-b4ef-6bde110b580c"},"host":"e2e-shared-b-1df35a.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"16362a98-926d-4d5a-b4ef-6bde110b580c","method":"POST","path":"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":200414899,"seconds":1785959768},"url_path":"/ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:58150","port":58150}}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-1df35a/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d10fbb"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"85f6e16d-6250-45ba-a2dd-93b05c233658","keyName":"e2e-rate-b-d10fbb","selected_subscription":"e2e-rate-iso-b-d10fbb","selected_subscription_key":"ai-tenant-e2e-shared-b-1df35a/e2e-rate-iso-b-d10fbb@ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-1df35a/models/facebook/opt-125m","name":"rate-test-model-1df35a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d10fbb","namespace":"ai-tenant-e2e-shared-b-1df35a","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-1df35a/rate-test-model-1df35a"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:56:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16362a98-926d-4d5a-b4ef-6bde110b580c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b4ada92fb82bf0cf1bd99087b38c7f5fc69531e006eeb25355cd966be01415"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b7cdb41c6cdf3892b11b5b8a180acd7b1a80b0dca17855e323b476d624e97a"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323ea3a05e49d03cb5c3d666825573bedd04f9eeac6ea029fc4156c2ea224e55"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/383e28bb9869e3b5b7abe3f5941dd15faa1e9638247a564d09e00a8e95ac6918"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92830fe0f35a697d73c3197513c81ee651276a55f258e41c2da485c9b40dcc21"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16e77937e98040f3e21f37b3104e52ace08fd026578669702cbb576dd54cdd42"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c374ea25649e8a992077f72a2fef28ec4573f969f96c95322b57f43a8f9bd325"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d3830821cd68cccc55437cb320896a82bb507c0b2e5856a7a5a59af7d2e2af8"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2823306642b3537db723c33a96e21bd0b5919fd32eedace83951d4c70c7d7675"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8ab36dbfd82bd208553809902aea442a1ce812c194b94e9e20f915b7fbe8e50"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/010414bcb239e2deaf7b83d2b8225a9e296013b446384494ff442d2a15deff09"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d197960108c2cf1be868443892b46b04b65e9a290c1b4bad4677e2c96077a090"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50b8791cf0fa8f37f7db0051c3f3aed8ade9e03ea0f0f09ad82fcc5582a1c554"} {"level":"info","ts":"2026-08-05T19:56:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dbab67643dee59192009a89a06b64ce274ae078331e29c423cab7ec30b9e411"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1a08197d54722c40897cc5a9066f27a8dc3f5be297fa88dc065e42385382d03"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c47a9c3e8ab5dfa086f7b56c73179a7f77fdf5e3379838916b8ee7d07659bfd"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a333839af9a5c47277cd82cac657d12c50800ad4eb70fa4980826b1083cd9b7"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28e99a8f22fd81441b305c8d82a282d969e56661ffff3f4e01a9bc733d6128a2"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ff9c2ee98c069efbb08578277af8b68285c974c3294593c14cf4a7c8c15b284"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698d1b0650397f4c04b5e2d06e5bf763785cf4fde8e7476835cf512abf9e8ef7"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6837148a0c77ea1ab78ddfa1c848a2e766bef867b3afa31f7afd25fbb851432e"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f041c9c0239a079a06acd83f633eba1f915a2d7359eaeba04af90e010f51e11"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/412438492ff45cbbfebf08b1170960fcd2908ea896bea5e193fd66fc1e7b0d2b"} {"level":"info","ts":"2026-08-05T19:56:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b2eef357d91568a13a03924e45ec9a4ffa865a8bd9534a678e38408d9f8b7b3"} {"level":"info","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474ac251-847b-4a62-90e5-b4c861d74253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38356","PortSpecifier":{"PortValue":38356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"474ac251-847b-4a62-90e5-b4c861d74253","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"474ac251-847b-4a62-90e5-b4c861d74253","object":"source:{address:{socket_address:{address:\"10.132.0.15:38356\" port_value:38356}}} destination:{address:{socket_address:{address:\"10.132.0.39:443\" port_value:443}}} request:{time:{seconds:1785959854 nanos:15413415} http:{id:\"474ac251-847b-4a62-90e5-b4c861d74253\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"69\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWw0ZzhoCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"474ac251-847b-4a62-90e5-b4c861d74253\"} path:\"/maas-api/v1/api-keys\" host:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"474ac251-847b-4a62-90e5-b4c861d74253","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"474ac251-847b-4a62-90e5-b4c861d74253","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWw0ZzhoCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"474ac251-847b-4a62-90e5-b4c861d74253"},"host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"474ac251-847b-4a62-90e5-b4c861d74253","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":15413415,"seconds":1785959854}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38356},"address":"10.132.0.15:38356"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"474ac251-847b-4a62-90e5-b4c861d74253"},"host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"474ac251-847b-4a62-90e5-b4c861d74253","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":15413415,"seconds":1785959854},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:38356","port":38356}}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"474ac251-847b-4a62-90e5-b4c861d74253","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474ac251-847b-4a62-90e5-b4c861d74253","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"474ac251-847b-4a62-90e5-b4c861d74253","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:38370","PortSpecifier":{"PortValue":38370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"142ea79d-73ec-4793-b54f-a72b281fbf34","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","object":"source:{address:{socket_address:{address:\"10.132.0.15:38370\" port_value:38370}}} destination:{address:{socket_address:{address:\"10.132.0.39:443\" port_value:443}}} request:{time:{seconds:1785959854 nanos:63917177} http:{id:\"142ea79d-73ec-4793-b54f-a72b281fbf34\" method:\"POST\" headers:{key:\":authority\" value:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"142ea79d-73ec-4793-b54f-a72b281fbf34\"} path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\" host:\"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bubycVtgQuIqfoWZ_qTSbe9lw9k2TBQfUKEiVBwLNhIoGikEudCfg7SHwwiC"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7c98bb20-886a-4fbf-80ea-86c268139e51","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"7c98bb20-886a-4fbf-80ea-86c268139e51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"142ea79d-73ec-4793-b54f-a72b281fbf34"},"host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"142ea79d-73ec-4793-b54f-a72b281fbf34","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":63917177,"seconds":1785959854}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":38370},"address":"10.132.0.15:38370"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~maas-default-gateway-openshift-default-5ccb968c66-l4g8h.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"142ea79d-73ec-4793-b54f-a72b281fbf34"},"host":"maas.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"142ea79d-73ec-4793-b54f-a72b281fbf34","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":63917177,"seconds":1785959854},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:38370","port":38370}}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7c98bb20-886a-4fbf-80ea-86c268139e51","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:57:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"142ea79d-73ec-4793-b54f-a72b281fbf34","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"} {"level":"error","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7"} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:57:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T19:58:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-08-05T19:58:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36952","PortSpecifier":{"PortValue":36952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ab76348-1d3d-4be4-b815-9abdf175c002","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","object":"source:{address:{socket_address:{address:\"10.132.0.15:36952\" port_value:36952}}} destination:{address:{socket_address:{address:\"10.132.0.67:443\" port_value:443}}} request:{time:{seconds:1785959896 nanos:719345361} http:{id:\"5ab76348-1d3d-4be4-b815-9abdf175c002\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/maas-api/v1/api-keys\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-length\" value:\"66\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-request-id\" value:\"5ab76348-1d3d-4be4-b815-9abdf175c002\"} path:\"/maas-api/v1/api-keys\" host:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","tokenreview":{"name":""}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/783b8a1f854f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=462e4a18-f300-4e47-8981-6dadb79f7c5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8cf815ab-3092-4715-8beb-fe6471d1a679","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5ab76348-1d3d-4be4-b815-9abdf175c002"},"host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"5ab76348-1d3d-4be4-b815-9abdf175c002","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":719345361,"seconds":1785959896}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36952},"address":"10.132.0.15:36952"}}}}},"destination":{"address":"10.132.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"},"headers":{":authority":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"5ab76348-1d3d-4be4-b815-9abdf175c002"},"host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"5ab76348-1d3d-4be4-b815-9abdf175c002","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":719345361,"seconds":1785959896},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:36952","port":36952}}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-c686d7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:58:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab76348-1d3d-4be4-b815-9abdf175c002","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.15:36958","PortSpecifier":{"PortValue":36958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","method":"POST","path":"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions","host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","object":"source:{address:{socket_address:{address:\"10.132.0.15:36958\" port_value:36958}}} destination:{address:{socket_address:{address:\"10.132.0.67:443\" port_value:443}}} request:{time:{seconds:1785959898 nanos:781206961} http:{id:\"7468ecf5-3627-48fe-a90f-66870e8c20b5\" method:\"POST\" headers:{key:\":authority\" value:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\":method\" value:\"POST\"} headers:{key:\":path\" value:\"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions\"} headers:{key:\":scheme\" value:\"https\"} headers:{key:\"accept\" value:\"*/*\"} headers:{key:\"accept-encoding\" value:\"gzip, deflate\"} headers:{key:\"authorization\" value:\"***REDACTED***\"} headers:{key:\"content-type\" value:\"application/json\"} headers:{key:\"forwarded\" value:\"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https\"} headers:{key:\"user-agent\" value:\"python-requests/2.32.5\"} headers:{key:\"x-envoy-decorator-operation\" value:\"ipp-route-c686d7-kserve-workload-svc.ai-tenant-e2e-ipp-a-c686d7.svc.cluster.local:8000/*\"} headers:{key:\"x-envoy-external-address\" value:\"10.132.0.15\"} headers:{key:\"x-envoy-peer-metadata\" value:\"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\"} headers:{key:\"x-envoy-peer-metadata-id\" value:\"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local\"} headers:{key:\"x-forwarded-for\" value:\"44.212.242.249,10.132.0.15\"} headers:{key:\"x-forwarded-host\" value:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\"} headers:{key:\"x-forwarded-port\" value:\"443\"} headers:{key:\"x-forwarded-proto\" value:\"https\"} headers:{key:\"x-gateway-model-name\" value:\"facebook/opt-125m\"} headers:{key:\"x-request-id\" value:\"7468ecf5-3627-48fe-a90f-66870e8c20b5\"} path:\"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions\" host:\"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com\" scheme:\"https\" protocol:\"HTTP/1.1\"}} context_extensions:{key:\"host\" value:\"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23\"} metadata_context:{}"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-VZ4VadwlRWbmc8vw_g1oBFBOwPFeW7z345jOn3ohII0q1vymOelMdKGgRig6"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7767026-10c7-481e-bed8-dbf80dec48c7","keyName":"e2e-ipp-c686d7","subscription":"ipp-route-c686d7-sub","tenant":"e2e-ipp-a-c686d7","userId":"b7767026-10c7-481e-bed8-dbf80dec48c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-c686d7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-c686d7/models/facebook/opt-125m","name":"ipp-route-c686d7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-c686d7-sub","namespace":"ai-tenant-e2e-ipp-a-c686d7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7"}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-c686d7-kserve-workload-svc.ai-tenant-e2e-ipp-a-c686d7.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1jNjg2ZDctb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWM2ODZkNy1vcGVuc2hpZnQtZGVmYXVsdC04NGQ0NjliYmY4LW00bTRiCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWM2ODZkNy1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1jNjg2ZDctb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7468ecf5-3627-48fe-a90f-66870e8c20b5"},"host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","method":"POST","path":"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":781206961,"seconds":1785959898}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36958},"address":"10.132.0.15:36958"}}}}},"destination":{"address":"10.132.0.67:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"},"headers":{":authority":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-c686d7-kserve-workload-svc.ai-tenant-e2e-ipp-a-c686d7.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.15","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.67~e2e-ipp-a-c686d7-openshift-default-84d469bbf8-m4m4b.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.15","x-forwarded-host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"7468ecf5-3627-48fe-a90f-66870e8c20b5"},"host":"e2e-ipp-a-c686d7.apps.5fba53e1-ecaa-4ab5-92b1-783b8a1f854f.prod.konfluxeaas.com","id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","method":"POST","path":"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":781206961,"seconds":1785959898},"url_path":"/ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.15:36958","port":36958}}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-c686d7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-c686d7-sub"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7767026-10c7-481e-bed8-dbf80dec48c7","keyName":"e2e-ipp-c686d7","selected_subscription":"ipp-route-c686d7-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7-sub@ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-c686d7/models/facebook/opt-125m","name":"ipp-route-c686d7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-c686d7-sub","namespace":"ai-tenant-e2e-ipp-a-c686d7","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-c686d7/ipp-route-c686d7"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-08-05T19:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7468ecf5-3627-48fe-a90f-66870e8c20b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-08-05T19:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed57517f4f38293dbc4abc44daf8bd5a738f3209a36e1d8c69398e3ac0a48cb6"} {"level":"info","ts":"2026-08-05T19:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ec8cd9f66558991f7076706b5b6dbee24fcd51cae21ad534f8c8f9f306b3bd0"} {"level":"info","ts":"2026-08-05T19:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c79c7c5b6a62877134c639c7427e19e982919437aaf93dfe28c1f3bea1dc03a5"} {"level":"info","ts":"2026-08-05T19:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a95b36d77dae9771505d83a9b8af574225a7f9a4449c346358e5569c52f5a4d7"} {"level":"info","ts":"2026-08-05T19:59:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ff0f3f91986a55bf90d2af2a4c1fcb970b1c73d422e244615f41c684c5fad0a"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/844c78ad393a803694cf326b39f713b7e29fa870dfa3b277cbcfec5127283050"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f1804cc26d33552cdabbe809faa255f88a9e92876393931958dc43dca66fc0b"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc0b94d7a7bd24ac5f97da5ccc78efaa24bcebfa136915eb6b9d8f9159253e23"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/013e19be7baca5a637a31c5f536c37c62be7fb5792310ff4959f69c8fa1cde62"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba861fa36490a68b757037ed27ca33f5a3dfb798979933f97c3435f01cbcdd0f"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db928295e2c06588bc9e70ff89641f506e43d29aed13338e1779dfc88c7244a5"} {"level":"info","ts":"2026-08-05T19:59:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b52595c3b0a8f6075031b5eb7da8d8091438571e8a8737f3a811e17e60e99fc"}