{"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8967f6a40eaf191d6c8f0fc6d67657a0757eb0e6dd041739b4e9194c241dce7a"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42ef167d677032d2a07bcac23f730111559dbe0ecdb2f25cf4a2491e9ed989cc"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc81f0d076ab7c5b7359e1f0a8a86b8075f5b7fff1335a0d9027b35dc92046d8"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd8ade55c163626a560c7e2a2b00d90964cba97afeb780b27bb7549814a289dc"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7411b5ecd86d6ee3656426639e4d4b8ed498b90a4ecd12930312c83b707ce50f"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f30daa6f7bd01b2e0c7926cf84bbba112c0a9fa025c4878e308c39aa8dd001a5"} {"level":"info","ts":"2026-07-23T10:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"} {"level":"info","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"} {"level":"error","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"error","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3"} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a"} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1"} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T10:38:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"} {"level":"error","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-23T10:38:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"016265e8-0020-4830-ad21-9c76ca777df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37426","PortSpecifier":{"PortValue":37426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"016265e8-0020-4830-ad21-9c76ca777df8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"016265e8-0020-4830-ad21-9c76ca777df8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37426","PortSpecifier":{"PortValue":37426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803113,"nanos":964011568},"http":{"id":"016265e8-0020-4830-ad21-9c76ca777df8","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"016265e8-0020-4830-ad21-9c76ca777df8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"]}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"016265e8-0020-4830-ad21-9c76ca777df8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"016265e8-0020-4830-ad21-9c76ca777df8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"016265e8-0020-4830-ad21-9c76ca777df8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"016265e8-0020-4830-ad21-9c76ca777df8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55880","PortSpecifier":{"PortValue":55880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:55880","PortSpecifier":{"PortValue":55880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803114,"nanos":1947738},"http":{"id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","method":"POST","headers":{":authority":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"]}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bc0d57/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4df17edd-8ee3-4d12-9beb-ff73a09e2540","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803114,"nanos":38635624},"http":{"id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n\"}"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","subscription":"e2e-rate-iso-a-c1652c","tenant":"e2e-shared-a-d0ac3e","userId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-c1652c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c1652c"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","selected_subscription":"e2e-rate-iso-a-c1652c","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-c1652c@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c23b9f74-3a9e-4d10-aee2-b492cf59e52a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803115,"nanos":116856321},"http":{"id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n\"}"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","subscription":"e2e-rate-iso-a-c1652c","tenant":"e2e-shared-a-d0ac3e","userId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-c1652c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c1652c"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","selected_subscription":"e2e-rate-iso-a-c1652c","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-c1652c@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e98dae1-9d21-4f1e-a59f-e06912e1a3c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37466","PortSpecifier":{"PortValue":37466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae7505ca-90c4-40cd-859e-efc62e76028d","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37466","PortSpecifier":{"PortValue":37466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803116,"nanos":155697427},"http":{"id":"ae7505ca-90c4-40cd-859e-efc62e76028d","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-nz47HiV9rWdQuLM5_gxuOhpity6KMqBppfzng9513omlbZpRANGP1Rlm1j1n\"}"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","subscription":"e2e-rate-iso-a-c1652c","tenant":"e2e-shared-a-d0ac3e","userId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-c1652c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c1652c"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c8e14266-fa3b-48be-9fa6-6ffb5ff5acca","keyName":"e2e-rate-a-c1652c","selected_subscription":"e2e-rate-iso-a-c1652c","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-c1652c@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c1652c","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae7505ca-90c4-40cd-859e-efc62e76028d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48086","PortSpecifier":{"PortValue":48086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48086","PortSpecifier":{"PortValue":48086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803129,"nanos":142384532},"http":{"id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"]}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"669018ea-cfdf-4232-9c1c-1bf2018661cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45682","PortSpecifier":{"PortValue":45682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dff5db1f-ea89-486d-9711-7818317c4e2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45682","PortSpecifier":{"PortValue":45682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803129,"nanos":177718772},"http":{"id":"dff5db1f-ea89-486d-9711-7818317c4e2f","method":"POST","headers":{":authority":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"]}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d181e3a1eb85"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cf152431-fe90-46f5-b48a-82e6b7ff9823"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6ae727de-d400-4565-98fb-c30a3bfdee19","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bc0d57/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dff5db1f-ea89-486d-9711-7818317c4e2f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48094","PortSpecifier":{"PortValue":48094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48094","PortSpecifier":{"PortValue":48094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803129,"nanos":211098721},"http":{"id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp\"}"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","subscription":"e2e-rate-iso-a-f3305a","tenant":"e2e-shared-a-d0ac3e","userId":"4ca5da6f-b092-497d-8af7-d7655ac85614","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f3305a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f3305a"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","selected_subscription":"e2e-rate-iso-a-f3305a","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-f3305a@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5bdd62bb-b8f0-41b7-a84e-9a09d0d4a63f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"128b9dfb-0c40-4937-8506-45251dc99c08","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48102","PortSpecifier":{"PortValue":48102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803130,"nanos":249503144},"http":{"id":"128b9dfb-0c40-4937-8506-45251dc99c08","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp\"}"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","subscription":"e2e-rate-iso-a-f3305a","tenant":"e2e-shared-a-d0ac3e","userId":"4ca5da6f-b092-497d-8af7-d7655ac85614","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f3305a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f3305a"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","selected_subscription":"e2e-rate-iso-a-f3305a","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-f3305a@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"128b9dfb-0c40-4937-8506-45251dc99c08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48118","PortSpecifier":{"PortValue":48118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","method":"POST","path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions","host":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48118","PortSpecifier":{"PortValue":48118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803131,"nanos":285727542},"http":{"id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","method":"POST","headers":{":authority":"e2e-shared-a-d0ac3e.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B2qHXBj8eyy8MR4L_vFngClMkWE1cXaG8zGzKimMROadgYkSMlHZ4HAPDIfp\"}"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","subscription":"e2e-rate-iso-a-f3305a","tenant":"e2e-shared-a-d0ac3e","userId":"4ca5da6f-b092-497d-8af7-d7655ac85614","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\",\"requestedSubscription\":\"e2e-rate-iso-a-f3305a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-d0ac3e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-d0ac3e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f3305a"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4ca5da6f-b092-497d-8af7-d7655ac85614","keyName":"e2e-rate-a-f3305a","selected_subscription":"e2e-rate-iso-a-f3305a","selected_subscription_key":"ai-tenant-e2e-shared-a-d0ac3e/e2e-rate-iso-a-f3305a@ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-d0ac3e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f3305a","namespace":"ai-tenant-e2e-shared-a-d0ac3e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-d0ac3e/rate-test-model-d0ac3e"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9663453f-ddac-4136-ade7-8d06e1bd1db3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","method":"POST","path":"/ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57/v1/completions","host":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:45690","PortSpecifier":{"PortValue":45690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784803131,"nanos":320109121},"http":{"id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","method":"POST","headers":{":authority":"e2e-shared-b-bc0d57.apps.643a1f1a-c69f-47e5-9277-d181e3a1eb85.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1AkwxF9i3L7VJtYdZ_vaBGvVQZmU8jfgvrlURu5SRIwNtUlwkmmQyWRXzuRTV"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-bc0d57.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1AkwxF9i3L7VJtYdZ_vaBGvVQZmU8jfgvrlURu5SRIwNtUlwkmmQyWRXzuRTV\"}"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc0d57.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"81e82cbc-4f50-4723-8267-5ee308b76cb9","keyName":"e2e-rate-b-f3305a","subscription":"e2e-rate-iso-b-f3305a","tenant":"e2e-shared-b-bc0d57","userId":"81e82cbc-4f50-4723-8267-5ee308b76cb9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-bc0d57.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57\",\"requestedSubscription\":\"e2e-rate-iso-b-f3305a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-bc0d57.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bc0d57","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f3305a","namespace":"ai-tenant-e2e-shared-b-bc0d57","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57"}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-bc0d57/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f3305a"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"81e82cbc-4f50-4723-8267-5ee308b76cb9","keyName":"e2e-rate-b-f3305a","selected_subscription":"e2e-rate-iso-b-f3305a","selected_subscription_key":"ai-tenant-e2e-shared-b-bc0d57/e2e-rate-iso-b-f3305a@ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bc0d57","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f3305a","namespace":"ai-tenant-e2e-shared-b-bc0d57","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-bc0d57/rate-test-model-bc0d57"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-23T10:38:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82dff7df-0a69-4b0f-9562-6741ceec6b7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-23T10:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/115ecbeddaa078db4351c6e61520ede062da8d7eabd11b7397f4d573f4c3f321"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/452825316f681802eaa1090cb3b481efdf99c4d0330484ebdf6577b8c0735bfb"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4551732c659b541a527af3950ff4822d599671a8704c215523b64c8067fd74d8"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee1155d4bfb4c1a80411ec44439259281bbd059b12e099ff21aeb77752321fd3"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e1633be529485b3136b23f2c203afefc0fb0efff537c7bd361c74cb2853229a"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72fce91285389aba2b6a56ab6d58d94834057a11a61b5832e326adbd8b21dddf"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/478d51213dc50416cb27b4e9f70fb637b93b9afaf5dcaad09d65f449d5226ad3"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea6ef0da157233293204d501404be093f50973b6b6e534cbff38aacd1fd84f5a"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ca5832d508ad7f1b8d370aff76e94aac60b62fc30f778b076494af514c022a4"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2592e1fdcea663c4f68d6b21b2f6b7a69070fa0666e9cc5002e30fd88d0de7a"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e3254e17214aae25f6a33c30d20fb4241f4c97346ad9a4025bbce451575878c"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5263e6c42cc1e792c3fc44e1a0154f78c615f90ff1420becc116896d43ad53c3"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7783964af1b9b474682df7c93095ddefa3689af4c8d8748c7f58339bf85654b1"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f9ad94e8a43a204059d7d1a3b8cd77a55f37baed79e8ff19f3b9ebf96b4c66b"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb55a749899a585792c4a4edd1d66f7a4c61b0c5f6f841950e3129bddcae8cd3"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71511f439317b2fe523ac8ff9824e58726f8d17346a98ba1b6add4132a5b1b49"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b3be645301788edee454d4894cfc83283b0cc8b54ba29ffae6242305554d692"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9eb7d668665779ddcc9c87bfad670c68c9b5a7bbb3f235996b390734819e868"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9db9b074ab478b7b0c4a6005df4df52c582aa40a6bad83b5b60df0baaccded43"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25733eb2a18cdb91cf56ba4be4a64ec99396f589013b14a073fe89df48503c5d"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77192ed25d2dd6b88b1a8c9e2596ccdc4449d70795d659e29d42dfbec8be31b6"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17df7e5fb792f5bdff669ca176e8dffdfd3097a2ab4fc3d7c716c5ed91c8de2b"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/68014c80a8dcf43c5223174ce22668f5ae14d18fe8a26df4d34f5c5f795ff695"} {"level":"info","ts":"2026-07-23T10:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72f532446919444a2ad7ba73e09095fde9e587471e52a322cde0440d89a5b8ff"}