{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"error","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d"}
{"level":"info","ts":"2026-08-05T18:28:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c"}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37734","PortSpecifier":{"PortValue":37734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01e47554-beb2-4831-b614-b8ce76bdc01c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","object":"source:{address:{socket_address:{address:\"10.132.0.11:37734\"  port_value:37734}}}  destination:{address:{socket_address:{address:\"10.132.0.39:443\"  port_value:443}}}  request:{time:{seconds:1785954502  nanos:153879885}  http:{id:\"01e47554-beb2-4831-b614-b8ce76bdc01c\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"01e47554-beb2-4831-b614-b8ce76bdc01c\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b709a57ff52d716238d5b75ee44b81e4dbffb07437eaaafc5a4460f46708f542\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b709a57ff52d716238d5b75ee44b81e4dbffb07437eaaafc5a4460f46708f542"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"01e47554-beb2-4831-b614-b8ce76bdc01c"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"01e47554-beb2-4831-b614-b8ce76bdc01c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":153879885,"seconds":1785954502}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37734},"address":"10.132.0.11:37734"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b709a57ff52d716238d5b75ee44b81e4dbffb07437eaaafc5a4460f46708f542"},"headers":{":authority":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"01e47554-beb2-4831-b614-b8ce76bdc01c"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"01e47554-beb2-4831-b614-b8ce76bdc01c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":153879885,"seconds":1785954502},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37734","port":37734}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e47554-beb2-4831-b614-b8ce76bdc01c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37532","PortSpecifier":{"PortValue":37532}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","object":"source:{address:{socket_address:{address:\"10.132.0.11:37532\"  port_value:37532}}}  destination:{address:{socket_address:{address:\"10.132.0.40:443\"  port_value:443}}}  request:{time:{seconds:1785954502  nanos:188469142}  http:{id:\"b350b201-1460-4deb-a395-a4c62b7cc0e2\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"70\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdC02NGM2N2Y4Yjg0LTk0Z2o0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"b350b201-1460-4deb-a395-a4c62b7cc0e2\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.40:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdC02NGM2N2Y4Yjg0LTk0Z2o0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b350b201-1460-4deb-a395-a4c62b7cc0e2"},"host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":188469142,"seconds":1785954502}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37532},"address":"10.132.0.11:37532"}}}}},"destination":{"address":"10.132.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"},"headers":{":authority":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"70","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"b350b201-1460-4deb-a395-a4c62b7cc0e2"},"host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":188469142,"seconds":1785954502},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37532","port":37532}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6fb560/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b350b201-1460-4deb-a395-a4c62b7cc0e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37744","PortSpecifier":{"PortValue":37744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","object":"source:{address:{socket_address:{address:\"10.132.0.11:37744\"  port_value:37744}}}  destination:{address:{socket_address:{address:\"10.132.0.39:443\"  port_value:443}}}  request:{time:{seconds:1785954502  nanos:227406636}  http:{id:\"d31d7af5-031b-4660-89e8-389e5f5be2a1\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"d31d7af5-031b-4660-89e8-389e5f5be2a1\"}  path:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"  host:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xa1lm1qmxAHAwgRA_augWv9Bdb2YXzCC5qP0nHFUjS51fiBMLy0rafOruNEa"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","subscription":"e2e-rate-iso-a-94a82a","tenant":"e2e-shared-a-70b4a4","userId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d31d7af5-031b-4660-89e8-389e5f5be2a1"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":227406636,"seconds":1785954502}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37744},"address":"10.132.0.11:37744"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76"},"headers":{":authority":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"d31d7af5-031b-4660-89e8-389e5f5be2a1"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":227406636,"seconds":1785954502},"url_path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37744","port":37744}}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-94a82a"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","selected_subscription":"e2e-rate-iso-a-94a82a","selected_subscription_key":"ai-tenant-e2e-shared-a-70b4a4/e2e-rate-iso-a-94a82a@ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d31d7af5-031b-4660-89e8-389e5f5be2a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37756","PortSpecifier":{"PortValue":37756}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a2a272d-b304-448c-89d0-aa715fa692dd","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","object":"source:{address:{socket_address:{address:\"10.132.0.11:37756\"  port_value:37756}}}  destination:{address:{socket_address:{address:\"10.132.0.39:443\"  port_value:443}}}  request:{time:{seconds:1785954503  nanos:265993718}  http:{id:\"2a2a272d-b304-448c-89d0-aa715fa692dd\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"2a2a272d-b304-448c-89d0-aa715fa692dd\"}  path:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"  host:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xa1lm1qmxAHAwgRA_augWv9Bdb2YXzCC5qP0nHFUjS51fiBMLy0rafOruNEa"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","subscription":"e2e-rate-iso-a-94a82a","tenant":"e2e-shared-a-70b4a4","userId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS03MGI0YTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTcwYjRhNC1vcGVuc2hpZnQtZGVmYXVsdC1iOGY0OGRiNTYtbDV3cWcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtNzBiNGE0LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTcwYjRhNC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2a2a272d-b304-448c-89d0-aa715fa692dd"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"2a2a272d-b304-448c-89d0-aa715fa692dd","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":265993718,"seconds":1785954503}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37756},"address":"10.132.0.11:37756"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76"},"headers":{":authority":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"2a2a272d-b304-448c-89d0-aa715fa692dd"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"2a2a272d-b304-448c-89d0-aa715fa692dd","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":265993718,"seconds":1785954503},"url_path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37756","port":37756}}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-94a82a"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","selected_subscription":"e2e-rate-iso-a-94a82a","selected_subscription_key":"ai-tenant-e2e-shared-a-70b4a4/e2e-rate-iso-a-94a82a@ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a2a272d-b304-448c-89d0-aa715fa692dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37758","PortSpecifier":{"PortValue":37758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","object":"source:{address:{socket_address:{address:\"10.132.0.11:37758\"  port_value:37758}}}  destination:{address:{socket_address:{address:\"10.132.0.39:443\"  port_value:443}}}  request:{time:{seconds:1785954504  nanos:312985396}  http:{id:\"f7e263b5-e5ad-4feb-88ed-03ce8edced75\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"f7e263b5-e5ad-4feb-88ed-03ce8edced75\"}  path:\"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions\"  host:\"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Xa1lm1qmxAHAwgRA_augWv9Bdb2YXzCC5qP0nHFUjS51fiBMLy0rafOruNEa"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","subscription":"e2e-rate-iso-a-94a82a","tenant":"e2e-shared-a-70b4a4","userId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-70b4a4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYS03MGI0YTQtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj8KBE5BTUUSNxo1ZTJlLXNoYXJlZC1hLTcwYjRhNC1vcGVuc2hpZnQtZGVmYXVsdC1iOGY0OGRiNTYtbDV3cWcKIAoJTkFNRVNQQUNFEhMaEW9wZW5zaGlmdC1pbmdyZXNzCnMKBU9XTkVSEmoaaGt1YmVybmV0ZXM6Ly9hcGlzL2FwcHMvdjEvbmFtZXNwYWNlcy9vcGVuc2hpZnQtaW5ncmVzcy9kZXBsb3ltZW50cy9lMmUtc2hhcmVkLWEtNzBiNGE0LW9wZW5zaGlmdC1kZWZhdWx0CjgKDVdPUktMT0FEX05BTUUSJxolZTJlLXNoYXJlZC1hLTcwYjRhNC1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":312985396,"seconds":1785954504}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37758},"address":"10.132.0.11:37758"}}}}},"destination":{"address":"10.132.0.39:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76"},"headers":{":authority":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-70b4a4-kserve-workload-svc.ai-tenant-e2e-shared-a-70b4a4.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.39~e2e-shared-a-70b4a4-openshift-default-b8f48db56-l5wqg.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75"},"host":"e2e-shared-a-70b4a4.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","method":"POST","path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":312985396,"seconds":1785954504},"url_path":"/ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37758","port":37758}}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-94a82a"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7a62b878-b366-4fb8-b35d-cb49be1517d4","keyName":"e2e-rate-a-94a82a","selected_subscription":"e2e-rate-iso-a-94a82a","selected_subscription_key":"ai-tenant-e2e-shared-a-70b4a4/e2e-rate-iso-a-94a82a@ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-70b4a4/models/facebook/opt-125m","name":"rate-test-model-70b4a4","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-94a82a","namespace":"ai-tenant-e2e-shared-a-70b4a4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-70b4a4/rate-test-model-70b4a4"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7e263b5-e5ad-4feb-88ed-03ce8edced75","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37546","PortSpecifier":{"PortValue":37546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.40:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","method":"POST","path":"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions","host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","object":"source:{address:{socket_address:{address:\"10.132.0.11:37546\"  port_value:37546}}}  destination:{address:{socket_address:{address:\"10.132.0.40:443\"  port_value:443}}}  request:{time:{seconds:1785954504  nanos:354893916}  http:{id:\"9cc0a63f-6387-47c6-b75f-040c21f39f04\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"rate-test-model-6fb560-kserve-workload-svc.ai-tenant-e2e-shared-b-6fb560.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"9cc0a63f-6387-47c6-b75f-040c21f39f04\"}  path:\"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions\"  host:\"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"996808ed94c47e26420356bec292c2626d545ca6dbbf50fb5043e5c62a1fcb6c\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6ha3m7HceERQiBgd_yAqG9uaPR3wmgvZTRJo5kcFZM5twILebdfNLdr2Q4b1"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8afb13d3-e3ae-43c5-b3f6-d35ea35c4243","keyName":"e2e-rate-b-94a82a","subscription":"e2e-rate-iso-b-94a82a","tenant":"e2e-shared-b-6fb560","userId":"8afb13d3-e3ae-43c5-b3f6-d35ea35c4243","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6fb560.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6fb560/models/facebook/opt-125m","name":"rate-test-model-6fb560","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-94a82a","namespace":"ai-tenant-e2e-shared-b-6fb560","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560"}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6fb560-kserve-workload-svc.ai-tenant-e2e-shared-b-6fb560.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9cc0a63f-6387-47c6-b75f-040c21f39f04"},"host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","method":"POST","path":"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":354893916,"seconds":1785954504}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":37546},"address":"10.132.0.11:37546"}}}}},"destination":{"address":"10.132.0.40:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"996808ed94c47e26420356bec292c2626d545ca6dbbf50fb5043e5c62a1fcb6c"},"headers":{":authority":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"rate-test-model-6fb560-kserve-workload-svc.ai-tenant-e2e-shared-b-6fb560.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqJAQoGTEFCRUxTEn8qfQpKCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0CkAKBE5BTUUSOBo2ZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdC02NGM2N2Y4Yjg0LTk0Z2o0CiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpzCgVPV05FUhJqGmhrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLXNoYXJlZC1iLTZmYjU2MC1vcGVuc2hpZnQtZGVmYXVsdAo4Cg1XT1JLTE9BRF9OQU1FEicaJWUyZS1zaGFyZWQtYi02ZmI1NjAtb3BlbnNoaWZ0LWRlZmF1bHQ=","x-envoy-peer-metadata-id":"router~10.132.0.40~e2e-shared-b-6fb560-openshift-default-64c67f8b84-94gj4.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"9cc0a63f-6387-47c6-b75f-040c21f39f04"},"host":"e2e-shared-b-6fb560.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","method":"POST","path":"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":354893916,"seconds":1785954504},"url_path":"/ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560/v1/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:37546","port":37546}}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-6fb560/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-94a82a"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8afb13d3-e3ae-43c5-b3f6-d35ea35c4243","keyName":"e2e-rate-b-94a82a","selected_subscription":"e2e-rate-iso-b-94a82a","selected_subscription_key":"ai-tenant-e2e-shared-b-6fb560/e2e-rate-iso-b-94a82a@ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-6fb560/models/facebook/opt-125m","name":"rate-test-model-6fb560","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-94a82a","namespace":"ai-tenant-e2e-shared-b-6fb560","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-6fb560/rate-test-model-6fb560"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cc0a63f-6387-47c6-b75f-040c21f39f04","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d0741adf982c17a7d2122c32cc5bfb954ed82fe17c94f7340ebe3c963c8ea76"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16cbb7501a2397038ca93d5bf1a3b601c86d59f8c2103991f99dbbf0a72a52ec"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4147391c4e801430a0e337c03f3f0070654ddeea6f05e280220e9ec609c8fa01"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4256900bcaf29128946253777e6f7f19709ee0b003be353c593202c1b28d99f3"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d34b62f261c5cfde1ea00fa9a2fd7e3aac9fdd8245901077c083d03a88da457e"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccaba05ff07bcf5ebaef3fe96ba6e3ccdbadf6b5eeb43847b8a7212e6f75326"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e368135f160aee394b2cbaef8c8532ae7a8dd76c284bfde792ca5d58b58ea6f"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a5e6bf72a0d940e99fff0b9bf33e93fb4bce804f7e6372a943624cf8c5acddf"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edd2c8f7ebda7b55d335967edcac178d7cb1d2e1a4fb1029ba0be8df54fb655"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b709a57ff52d716238d5b75ee44b81e4dbffb07437eaaafc5a4460f46708f542"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9af736adbd98a771e31a012715f04480fc472e11d0df1cded06009dd23566d5c"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a032f2fb260acd58a54025424cfadca9711597be8454e80efc30c61e78945546"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb3a5fb9ca79b578ecfbe138f1db6cb574a0151512d3c5cc47d1322985996034"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/613167c292a322d329a03c647f5d5b6a9354d29e39ddf70cc9e7d17a00608717"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/306fd431b5e023a9455a2bf37298ff589e163629cc471478d614e99f509fb0c9"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cc3325fe9451b659b1c60f34d0ecd1c373d321e8858817ca3412bb9e343fd3a"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6478bdf8392944523a2b74a0e127c29dda9dac7fe55a154f98abf452b3e989d"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/996808ed94c47e26420356bec292c2626d545ca6dbbf50fb5043e5c62a1fcb6c"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f777d0f611849b5686eedd36663469d4ad1a97febb9c03484cb39ebfe3801dc"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e85d034aa48f3f360fedc9323abc68dd9568dc38b3eb8edf92562d13590114cf"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7acd6b5bc60f36c48dc0e13d2e33360f27b8e06960bb56bda678cfe951da3175"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0f2593557defb38b79471389fb51f83a3752f4d5d5cd457d356ef567a519d29"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a69c7aa7fba36eaa0d9a2d559657c93cde66b900654ddb862e2a6044525552"}
{"level":"info","ts":"2026-08-05T18:28:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/604f3974b6b67aef0c7179312d5ddcde95c75c20ba85416bbefafa4bf002f300"}
{"level":"info","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58250","PortSpecifier":{"PortValue":58250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","object":"source:{address:{socket_address:{address:\"10.132.0.11:58250\"  port_value:58250}}}  destination:{address:{socket_address:{address:\"10.133.0.46:443\"  port_value:443}}}  request:{time:{seconds:1785954587  nanos:394422737}  http:{id:\"e3c48628-b121-4904-8ca6-2d3a38aa8d8c\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"69\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"e3c48628-b121-4904-8ca6-2d3a38aa8d8c\"}  path:\"/maas-api/v1/api-keys\"  host:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c"},"host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":394422737,"seconds":1785954587}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58250},"address":"10.132.0.11:58250"}}}}},"destination":{"address":"10.133.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"headers":{":authority":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"69","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqLAQoGTEFCRUxTEoABKn4KSwofc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtbmFtZRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdAovCiNzZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1yZXZpc2lvbhIIGgZsYXRlc3QKQQoETkFNRRI5GjdtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdC01Y2NiOTY4YzY2LWtmamdoCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwp0CgVPV05FUhJrGmlrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvbWFhcy1kZWZhdWx0LWdhdGV3YXktb3BlbnNoaWZ0LWRlZmF1bHQKOQoNV09SS0xPQURfTkFNRRIoGiZtYWFzLWRlZmF1bHQtZ2F0ZXdheS1vcGVuc2hpZnQtZGVmYXVsdA==","x-envoy-peer-metadata-id":"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c"},"host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":394422737,"seconds":1785954587},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:58250","port":58250}}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3c48628-b121-4904-8ca6-2d3a38aa8d8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:58260","PortSpecifier":{"PortValue":58260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4783c6d-1d89-4a76-827b-12647e890ad8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","object":"source:{address:{socket_address:{address:\"10.132.0.11:58260\"  port_value:58260}}}  destination:{address:{socket_address:{address:\"10.133.0.46:443\"  port_value:443}}}  request:{time:{seconds:1785954587  nanos:446912888}  http:{id:\"c4783c6d-1d89-4a76-827b-12647e890ad8\"  method:\"POST\"  headers:{key:\":authority\"  value:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"c4783c6d-1d89-4a76-827b-12647e890ad8\"}  path:\"/llm/facebook-opt-125m-simulated/v1/chat/completions\"  host:\"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12zB4IJFZfFbgtmGA_WxgRAS02LxkRETJYlCuQvMfvLkgEMX2bQkzXnro1G8S"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40e90969-c2d5-422c-9619-bcbf7799ce6e","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"40e90969-c2d5-422c-9619-bcbf7799ce6e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c4783c6d-1d89-4a76-827b-12647e890ad8"},"host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"c4783c6d-1d89-4a76-827b-12647e890ad8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":446912888,"seconds":1785954587}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":58260},"address":"10.132.0.11:58260"}}}}},"destination":{"address":"10.133.0.46:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"headers":{":authority":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"facebook-opt-125m-simulated-kserve-workload-svc.llm.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.133.0.46~maas-default-gateway-openshift-default-5ccb968c66-kfjgh.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"c4783c6d-1d89-4a76-827b-12647e890ad8"},"host":"maas.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"c4783c6d-1d89-4a76-827b-12647e890ad8","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":446912888,"seconds":1785954587},"url_path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:58260","port":58260}}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"40e90969-c2d5-422c-9619-bcbf7799ce6e","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:29:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4783c6d-1d89-4a76-827b-12647e890ad8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/cachi2/output/deps/gomod/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"}
{"level":"info","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-08-05T18:30:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-08-05T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-08-05T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-08-05T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36562","PortSpecifier":{"PortValue":36562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","object":"source:{address:{socket_address:{address:\"10.132.0.11:36562\"  port_value:36562}}}  destination:{address:{socket_address:{address:\"10.132.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785954630  nanos:215642300}  http:{id:\"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/maas-api/v1/api-keys\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-length\"  value:\"66\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"ChoKCkNMVVNURVJfSUQSDBoKS3ViZXJuZXRlcwqGAQoGTEFCRUxTEnwqegpHCh9zZXJ2aWNlLmlzdGlvLmlvL2Nhbm9uaWNhbC1uYW1lEiQaImUyZS1pcHAtYS1iNWIwOTMtb3BlbnNoaWZ0LWRlZmF1bHQKLwojc2VydmljZS5pc3Rpby5pby9jYW5vbmljYWwtcmV2aXNpb24SCBoGbGF0ZXN0Cj0KBE5BTUUSNRozZTJlLWlwcC1hLWI1YjA5My1vcGVuc2hpZnQtZGVmYXVsdC03ODhkNzlmYzk2LTV3d2NoCiAKCU5BTUVTUEFDRRITGhFvcGVuc2hpZnQtaW5ncmVzcwpwCgVPV05FUhJnGmVrdWJlcm5ldGVzOi8vYXBpcy9hcHBzL3YxL25hbWVzcGFjZXMvb3BlbnNoaWZ0LWluZ3Jlc3MvZGVwbG95bWVudHMvZTJlLWlwcC1hLWI1YjA5My1vcGVuc2hpZnQtZGVmYXVsdAo1Cg1XT1JLTE9BRF9OQU1FEiQaImUyZS1pcHAtYS1iNWIwOTMtb3BlbnNoaWZ0LWRlZmF1bHQ=\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-request-id\"  value:\"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9\"}  path:\"/maas-api/v1/api-keys\"  host:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/ce062d47bde8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cda03e05-1a72-43da-9c11-1c9c95357787"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"11203443-81a9-41d1-a299-ef2fce169fe6","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9"},"host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":215642300,"seconds":1785954630}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36562},"address":"10.132.0.11:36562"}}}}},"destination":{"address":"10.132.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"},"headers":{":authority":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-length":"66","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-request-id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9"},"host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","method":"POST","path":"/maas-api/v1/api-keys","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":215642300,"seconds":1785954630},"url_path":"/maas-api/v1/api-keys","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:36562","port":36562}}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b5b093/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:30:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba2251d3-1dfc-4a50-8e8f-9c4ebd1a01c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27be9387-734a-40bc-8799-e698e85aabb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36566","PortSpecifier":{"PortValue":36566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27be9387-734a-40bc-8799-e698e85aabb3","method":"POST","path":"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions","host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27be9387-734a-40bc-8799-e698e85aabb3","object":"source:{address:{socket_address:{address:\"10.132.0.11:36566\"  port_value:36566}}}  destination:{address:{socket_address:{address:\"10.132.0.44:443\"  port_value:443}}}  request:{time:{seconds:1785954632  nanos:271934619}  http:{id:\"27be9387-734a-40bc-8799-e698e85aabb3\"  method:\"POST\"  headers:{key:\":authority\"  value:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\":method\"  value:\"POST\"}  headers:{key:\":path\"  value:\"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions\"}  headers:{key:\":scheme\"  value:\"https\"}  headers:{key:\"accept\"  value:\"*/*\"}  headers:{key:\"accept-encoding\"  value:\"gzip, deflate\"}  headers:{key:\"authorization\"  value:\"***REDACTED***\"}  headers:{key:\"content-type\"  value:\"application/json\"}  headers:{key:\"forwarded\"  value:\"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https\"}  headers:{key:\"user-agent\"  value:\"python-requests/2.32.5\"}  headers:{key:\"x-envoy-decorator-operation\"  value:\"ipp-route-b5b093-kserve-workload-svc.ai-tenant-e2e-ipp-a-b5b093.svc.cluster.local:8000/*\"}  headers:{key:\"x-envoy-external-address\"  value:\"10.132.0.11\"}  headers:{key:\"x-envoy-peer-metadata\"  value:\"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\"}  headers:{key:\"x-envoy-peer-metadata-id\"  value:\"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local\"}  headers:{key:\"x-forwarded-for\"  value:\"44.212.242.249,10.132.0.11\"}  headers:{key:\"x-forwarded-host\"  value:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"}  headers:{key:\"x-forwarded-port\"  value:\"443\"}  headers:{key:\"x-forwarded-proto\"  value:\"https\"}  headers:{key:\"x-gateway-model-name\"  value:\"facebook/opt-125m\"}  headers:{key:\"x-request-id\"  value:\"27be9387-734a-40bc-8799-e698e85aabb3\"}  path:\"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions\"  host:\"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com\"  scheme:\"https\"  protocol:\"HTTP/1.1\"}}  context_extensions:{key:\"host\"  value:\"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc\"}  metadata_context:{}"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-s8TB3VdH3M24Pro2_PUHuxZjyksCNE2S4cZa7y9gJ9nOvn8qYkGo67g2U5fR"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0f59021e-f9a0-424f-b09b-1006795b8c8d","keyName":"e2e-ipp-b5b093","subscription":"ipp-route-b5b093-sub","tenant":"e2e-ipp-a-b5b093","userId":"0f59021e-f9a0-424f-b09b-1006795b8c8d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"***REDACTED***"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-b5b093.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-b5b093/models/facebook/opt-125m","name":"ipp-route-b5b093","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b5b093-sub","namespace":"ai-tenant-e2e-ipp-a-b5b093","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093"}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27be9387-734a-40bc-8799-e698e85aabb3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-b5b093-kserve-workload-svc.ai-tenant-e2e-ipp-a-b5b093.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"27be9387-734a-40bc-8799-e698e85aabb3"},"host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"27be9387-734a-40bc-8799-e698e85aabb3","method":"POST","path":"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https"},"time":{"nanos":271934619,"seconds":1785954632}},"source":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":36566},"address":"10.132.0.11:36566"}}}}},"destination":{"address":"10.132.0.44:443","port":443},"metadata":{},"request":{"context_extensions":{"host":"5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"},"headers":{":authority":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"***REDACTED***","content-type":"application/json","forwarded":"for=44.212.242.249;host=e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com;proto=https","user-agent":"python-requests/2.32.5","x-envoy-decorator-operation":"ipp-route-b5b093-kserve-workload-svc.ai-tenant-e2e-ipp-a-b5b093.svc.cluster.local:8000/*","x-envoy-external-address":"10.132.0.11","x-envoy-peer-metadata":"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","x-envoy-peer-metadata-id":"router~10.132.0.44~e2e-ipp-a-b5b093-openshift-default-788d79fc96-5wwch.openshift-ingress~openshift-ingress.svc.cluster.local","x-forwarded-for":"44.212.242.249,10.132.0.11","x-forwarded-host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","x-forwarded-port":"443","x-forwarded-proto":"https","x-gateway-model-name":"facebook/opt-125m","x-request-id":"27be9387-734a-40bc-8799-e698e85aabb3"},"host":"e2e-ipp-a-b5b093.apps.c7eec14e-674f-4ead-adc4-ce062d47bde8.prod.konfluxeaas.com","id":"27be9387-734a-40bc-8799-e698e85aabb3","method":"POST","path":"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions","protocol":"HTTP/1.1","scheme":"https","time":{"nanos":271934619,"seconds":1785954632},"url_path":"/ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093/v1/chat/completions","user_agent":"python-requests/2.32.5"},"source":{"address":"10.132.0.11:36566","port":36566}}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-b5b093/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-b5b093-sub"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27be9387-734a-40bc-8799-e698e85aabb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0f59021e-f9a0-424f-b09b-1006795b8c8d","keyName":"e2e-ipp-b5b093","selected_subscription":"ipp-route-b5b093-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093-sub@ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-b5b093/models/facebook/opt-125m","name":"ipp-route-b5b093","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-b5b093-sub","namespace":"ai-tenant-e2e-ipp-a-b5b093","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-b5b093/ipp-route-b5b093"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27be9387-734a-40bc-8799-e698e85aabb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-08-05T18:30:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27be9387-734a-40bc-8799-e698e85aabb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-08-05T18:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca6ee148fd69cc3334b88f5561d4f5cba8df9a166c3bc08795c9e7ab87330806"}
{"level":"info","ts":"2026-08-05T18:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf69f840b2ccd9fc9127edb378d09b65fa29c837e7e964ca7ad3eaf8608cd95f"}
{"level":"info","ts":"2026-08-05T18:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c03ca845214679c6c2ed4288652882f08035541ddb3a8faa3fec29afda6bfbc"}
{"level":"info","ts":"2026-08-05T18:31:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3990924eaa015597d5dd4024b56a9cb79619adf78dd9fd9b730c3c0c7cbc6d42"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/157aaba3332feb18eeaae3f8a24625d4e8b2e297f4841652a74a1f2fab5a13e2"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc3a89eb35794201427b495034f8d36ffaea3a356fc2991e0a657c430b20db19"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60936231b14b79ed34834c070609d3f594d65583526bc923727c55745b83716e"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cce96076231837364ac637284f35db77ea97ad73f4abda0cf0969a0f648360a"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f565581cbf5a40e5ad9b6d605018b99704a9d88c1ef77a4480d11a84cdd0911"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eeeb25794347c1292fd4b1c6b2ad050454b0d9224eece91bd9dd77cb8b4878da"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e426580626eda607d997db6416e696893a456e38d22fc66d22300a0f67a654a5"}
{"level":"info","ts":"2026-08-05T18:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b5beeb2a638813823b51db9920dd140dc9be9fcbd4cd251c533cfb1bf283492"}