{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"}
{"level":"info","ts":"2026-07-06T22:59:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T22:59:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"}
{"level":"error","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"debug","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"}
{"level":"info","ts":"2026-07-06T22:59:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28554b3-c5d2-452f-a702-2822f4291660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41390","PortSpecifier":{"PortValue":41390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f28554b3-c5d2-452f-a702-2822f4291660","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f28554b3-c5d2-452f-a702-2822f4291660","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41390","PortSpecifier":{"PortValue":41390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":653893634},"http":{"id":"f28554b3-c5d2-452f-a702-2822f4291660","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f28554b3-c5d2-452f-a702-2822f4291660","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f28554b3-c5d2-452f-a702-2822f4291660","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f28554b3-c5d2-452f-a702-2822f4291660","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f28554b3-c5d2-452f-a702-2822f4291660","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:58100","PortSpecifier":{"PortValue":58100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":699271749},"http":{"id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5beb8148-9923-4dd4-9d1b-ad6e70642b14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41406","PortSpecifier":{"PortValue":41406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41406","PortSpecifier":{"PortValue":41406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378789,"nanos":743781441},"http":{"id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:59:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e62f891-cd1b-4199-9277-dd71aa00e23f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41418","PortSpecifier":{"PortValue":41418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378790,"nanos":806937230},"http":{"id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1fa28e1-d95b-4686-8c41-9867aad05dbb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:41420","PortSpecifier":{"PortValue":41420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378791,"nanos":843088712},"http":{"id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KqPxDxNuxoT8rNk1_ftovtnp5J9aeZPSJRRmyK94UyVwMgxVwbg0JYjADc40\"}"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","subscription":"e2e-rate-iso-a-16ba3f","tenant":"e2e-shared-a-2ef6a3","userId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-16ba3f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-16ba3f"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"da8a73ae-a733-4e89-9ca7-62ce52e585d3","keyName":"e2e-rate-a-16ba3f","selected_subscription":"e2e-rate-iso-a-16ba3f","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-16ba3f@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-16ba3f","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T22:59:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23a2b70f-be55-4aa7-bc65-274a7f85fad4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51424","PortSpecifier":{"PortValue":51424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c701d7d2-e086-4ee1-895e-543ee792c81d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51424","PortSpecifier":{"PortValue":51424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":752210009},"http":{"id":"c701d7d2-e086-4ee1-895e-543ee792c81d","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c701d7d2-e086-4ee1-895e-543ee792c81d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3483e74d-d790-4056-997e-a2f7811e6d68","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47002","PortSpecifier":{"PortValue":47002}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":795137416},"http":{"id":"3483e74d-d790-4056-997e-a2f7811e6d68","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"]}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/77232a032e11"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=be21dc7f-6f79-4942-a28b-b6891d1568d1"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6716dfbb-fb3b-4ff2-8da4-5ffe9d6cf937","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3483e74d-d790-4056-997e-a2f7811e6d68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a8d309a-592c-4f1c-9a49-c2158577c714","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51428","PortSpecifier":{"PortValue":51428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378804,"nanos":836592602},"http":{"id":"9a8d309a-592c-4f1c-9a49-c2158577c714","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a8d309a-592c-4f1c-9a49-c2158577c714","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ca0311d-2b03-4305-86cf-cac33d01d656","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51442","PortSpecifier":{"PortValue":51442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378805,"nanos":877943586},"http":{"id":"8ca0311d-2b03-4305-86cf-cac33d01d656","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ca0311d-2b03-4305-86cf-cac33d01d656","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","method":"POST","path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions","host":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:51444","PortSpecifier":{"PortValue":51444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378806,"nanos":926549151},"http":{"id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","method":"POST","headers":{":authority":"e2e-shared-a-2ef6a3.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1btNBoR46Vdt0dWmn_qtHhlPbXK406KXXoxYFG3iEeyWEoM69bN9HnbhrXgAn\"}"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","subscription":"e2e-rate-iso-a-4a3f04","tenant":"e2e-shared-a-2ef6a3","userId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\",\"requestedSubscription\":\"e2e-rate-iso-a-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2ef6a3.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4a3f04"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ce578ae3-e50e-4c39-bcd5-d89b082dace5","keyName":"e2e-rate-a-4a3f04","selected_subscription":"e2e-rate-iso-a-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-a-2ef6a3/e2e-rate-iso-a-4a3f04@ai-tenant-e2e-shared-a-2ef6a3/rate-test-model-2ef6a3","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2ef6a3","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4a3f04","namespace":"ai-tenant-e2e-shared-a-2ef6a3","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2eaac890-2465-45fb-ac98-5c726fd1bf47","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"49b6ce21-e321-47e3-b342-a925dd0e1481","method":"POST","path":"/ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e/v1/completions","host":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.11:47006","PortSpecifier":{"PortValue":47006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783378806,"nanos":969218491},"http":{"id":"49b6ce21-e321-47e3-b342-a925dd0e1481","method":"POST","headers":{":authority":"e2e-shared-b-6c153e.apps.6ac67366-14b8-4c2a-aff3-77232a032e11.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7WVhCk8QEXsA1u5X_6u16lU9rj729chvvq2yZyt8fapjZDThEdK7PJOzGaFp"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7WVhCk8QEXsA1u5X_6u16lU9rj729chvvq2yZyt8fapjZDThEdK7PJOzGaFp\"}"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","keyName":"e2e-rate-b-4a3f04","subscription":"e2e-rate-iso-b-4a3f04","tenant":"e2e-shared-b-6c153e","userId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\",\"requestedSubscription\":\"e2e-rate-iso-b-4a3f04\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6c153e.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6c153e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4a3f04","namespace":"ai-tenant-e2e-shared-b-6c153e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:00:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4a3f04"}
{"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"43c24953-e7b7-47ea-b4d0-0d38498633fd","keyName":"e2e-rate-b-4a3f04","selected_subscription":"e2e-rate-iso-b-4a3f04","selected_subscription_key":"ai-tenant-e2e-shared-b-6c153e/e2e-rate-iso-b-4a3f04@ai-tenant-e2e-shared-b-6c153e/rate-test-model-6c153e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6c153e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4a3f04","namespace":"ai-tenant-e2e-shared-b-6c153e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"49b6ce21-e321-47e3-b342-a925dd0e1481","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:00:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4dc81c1bc1cbeeea6ddf855aa533d88352dcb9cb60b121c0ea79c6af27d52bf"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/211839e9ba5a9af7a9e332ba9c44416c18ef28e616f0e3f380a901f4234e5b80"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b70d010c5b14c94f49e4eb06b4788ed526145fd913e5085432a7d91f3537ece"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d9c16b71954b6ed2165aa69fe3e08eb464abc84f57646c2edfc667c5978ad36"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df6e0ce27d8c40269efa3db876180349c5aa81187ad5e5d612b175177ee5823c"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d70206b76cd2f46c43da6dbf9b7024c60b841f59cd214579fa748c33956c5c3"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b530e66baef06b24035917443d7bf3e3cc734a8425b1aebe7f7543a1ee91128a"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78260ca7ec584559efa599c01e2c8fd8a95df27fc51e923d929b3e0540426f28"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ce64c35db5eac99348713cd38135414ec31d078c5658e652f385296821ad9bc"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e8c7a49d32a8812e00d7bd1fc66d472696218a0187c2dfe967aab4c51465e64"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c7ff59b5bb76f3c02c3effbbaf9e2f40b4fb3db636b138735d0dfdade794e67"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d47b2b0ffe94474ace5faf04f97868e6c78a56a06cb897c6fa4b620ada6f4ee0"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba14b7626ed6134d6c523cba576644bb10482fc821dd0eab5fc96277ef63493c"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c0aeb009152348c45d3510bfcebbad54d763945e59352bc50914ad2432442d"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4234b4684cb324eecc52cb691e9374c6c8434e7338672d84752dd0e6902c73a7"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dae4410392f26167f924bb81f0b69d82503bae83ef7f87aa561ad81796d334b8"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f83f723a0aea9888d42d2d8215f5275494f3965d03ec2c29fd91e78da37e6228"}
{"level":"info","ts":"2026-07-06T23:00:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17924b9a24659507dbf20b3f271723e56ef31b2a5f5fc443ac97a921a6efdc2d"}
{"level":"info","ts":"2026-07-06T23:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6816ca3ace9a52a5802191eed7c34e3c539f0d59b336dc9914d5261df8cfe95"}
{"level":"info","ts":"2026-07-06T23:00:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/595d03a0edf4797f5817f242c4391cc84cf7c93636fd1e93e02775e228adf4a2"}