{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"}
{"level":"error","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"error","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:17:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"}
{"level":"debug","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c903253b-4f8f-421f-a11e-de36439ba996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c903253b-4f8f-421f-a11e-de36439ba996","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c903253b-4f8f-421f-a11e-de36439ba996","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54554","PortSpecifier":{"PortValue":54554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":847072834},"http":{"id":"c903253b-4f8f-421f-a11e-de36439ba996","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c903253b-4f8f-421f-a11e-de36439ba996","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c903253b-4f8f-421f-a11e-de36439ba996","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c903253b-4f8f-421f-a11e-de36439ba996","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c903253b-4f8f-421f-a11e-de36439ba996","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:46434","PortSpecifier":{"PortValue":46434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":887258595},"http":{"id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d9b7b5f-ead7-4cf4-a56c-80f895065666","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5d2c606-ea19-4719-9024-416105727aa2","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54570","PortSpecifier":{"PortValue":54570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437472,"nanos":926162086},"http":{"id":"b5d2c606-ea19-4719-9024-416105727aa2","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5d2c606-ea19-4719-9024-416105727aa2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5d2c606-ea19-4719-9024-416105727aa2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d2c606-ea19-4719-9024-416105727aa2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:17:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5d2c606-ea19-4719-9024-416105727aa2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54582","PortSpecifier":{"PortValue":54582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54582","PortSpecifier":{"PortValue":54582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437473,"nanos":985483265},"http":{"id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:17:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aeb18acf-9cc9-43fd-855f-9dbcb8940d5a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54598","PortSpecifier":{"PortValue":54598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54598","PortSpecifier":{"PortValue":54598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437475,"nanos":45782186},"http":{"id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1R29hfCZ0TsejEtOt_ASRkyj4x0NsVk3PVqK3oXfenaPhWK6tDiUlpNSrRg9i\"}"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","subscription":"e2e-rate-iso-a-0b9dc8","tenant":"e2e-shared-a-96d90d","userId":"326bdbe1-f7af-467e-aaa2-a91280e22536","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-0b9dc8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0b9dc8"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"326bdbe1-f7af-467e-aaa2-a91280e22536","keyName":"e2e-rate-a-0b9dc8","selected_subscription":"e2e-rate-iso-a-0b9dc8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-0b9dc8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0b9dc8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:17:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bec2f88b-3857-414c-9ef9-4b7855bc7c0b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35398","PortSpecifier":{"PortValue":35398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437487,"nanos":953228387},"http":{"id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e69bce48-a3e4-422b-ade9-d75cdd53c7e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67091bc8-a88e-469c-b176-ee6559d98ab4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49772","PortSpecifier":{"PortValue":49772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437487,"nanos":994654118},"http":{"id":"67091bc8-a88e-469c-b176-ee6559d98ab4","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T15:18:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"]}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2fe3c5c02158"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6b11cc4c-2301-4b55-be1f-37898c805cbb"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"d49c5dba-1b91-4a02-81f8-c2939d17692e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67091bc8-a88e-469c-b176-ee6559d98ab4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35402","PortSpecifier":{"PortValue":35402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437488,"nanos":30204706},"http":{"id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e901123-8d6d-46c9-ac27-d60d28b4bc0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17c012c6-e3c2-443c-9019-c52050b5b15b","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35412","PortSpecifier":{"PortValue":35412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437489,"nanos":69253984},"http":{"id":"17c012c6-e3c2-443c-9019-c52050b5b15b","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17c012c6-e3c2-443c-9019-c52050b5b15b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","method":"POST","path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions","host":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35424","PortSpecifier":{"PortValue":35424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437490,"nanos":138336034},"http":{"id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","method":"POST","headers":{":authority":"e2e-shared-a-96d90d.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykvHDcN3oK29LMz7_Cs5oNL8c6sEgNI6RWDXDxDW6m4okRILnCwmJrc0vuzY\"}"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","subscription":"e2e-rate-iso-a-d493c8","tenant":"e2e-shared-a-96d90d","userId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\",\"requestedSubscription\":\"e2e-rate-iso-a-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-96d90d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d493c8"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"6c1c7509-501a-4e6a-93ab-123f930e8f06","keyName":"e2e-rate-a-d493c8","selected_subscription":"e2e-rate-iso-a-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-a-96d90d/e2e-rate-iso-a-d493c8@ai-tenant-e2e-shared-a-96d90d/rate-test-model-96d90d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-96d90d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d493c8","namespace":"ai-tenant-e2e-shared-a-96d90d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"463a3eeb-7d1f-43db-9445-5ac5b172b41d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49784","PortSpecifier":{"PortValue":49784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"623064c0-a952-442c-a0d1-44ad85b76fba","method":"POST","path":"/ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250/v1/completions","host":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49784","PortSpecifier":{"PortValue":49784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783437490,"nanos":174008400},"http":{"id":"623064c0-a952-442c-a0d1-44ad85b76fba","method":"POST","headers":{":authority":"e2e-shared-b-17f250.apps.fb368764-5628-4303-9f07-2fe3c5c02158.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IwHYrIY7FfApGIH4_3AWFsqXJ1LEy71VrdfWa6580cRBGk4fudZ6JQGwvVZ6"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IwHYrIY7FfApGIH4_3AWFsqXJ1LEy71VrdfWa6580cRBGk4fudZ6JQGwvVZ6\"}"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","keyName":"e2e-rate-b-d493c8","subscription":"e2e-rate-iso-b-d493c8","tenant":"e2e-shared-b-17f250","userId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\",\"requestedSubscription\":\"e2e-rate-iso-b-d493c8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-17f250.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17f250","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d493c8","namespace":"ai-tenant-e2e-shared-b-17f250","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-d493c8"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a017053a-bbf5-4fa0-a9f1-c831feea0f46","keyName":"e2e-rate-b-d493c8","selected_subscription":"e2e-rate-iso-b-d493c8","selected_subscription_key":"ai-tenant-e2e-shared-b-17f250/e2e-rate-iso-b-d493c8@ai-tenant-e2e-shared-b-17f250/rate-test-model-17f250","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17f250","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-d493c8","namespace":"ai-tenant-e2e-shared-b-17f250","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T15:18:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"623064c0-a952-442c-a0d1-44ad85b76fba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T15:18:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c2d3697ff781ac41ea0aa00956be6811fc4cf77dcb58fb80ae01c69024a338"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/481b98b367d9778a62894e0752cef3faa9affacbe917817a392379dc64dd7fbd"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f4a197b8fed110a738c216c62455304a17f53675024cc74351e172affc21565"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/579b326d21a8785699c024c8633fa65a2ace21390acf6f9b0ed94064cd50605a"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/219f2502d26b070c6206a2c7a838fe5790f39604484563cfe54fe8d27c050696"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39bbdf2a85791697c5decdfd9a605c4483a516dbe53a8315d17b9c3e7522daf3"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a5877782ae8873f5e8095a7a524f964b57e7580c137415e620abffe93f05305"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a64696d783c1fd14b4a2bbe8c36b2627141ffebea49493df8e2df45ba7731790"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e303382f022378279c67b6c5392d12c91d29352ec646df5e9185f2d6baa5310a"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2147dd9b7e472ea3f6a8b2c0a3efc6843a6ff57d72336b4517de390ade5cdbb"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/358603397a37e009b92ceaf16b6619562970b6d545ec826deda3d1ebd18d6a69"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcf50bde9ec63e835b1fd342db75371450a906163e27a60a887948da25b1ab44"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c74c836309c9db0ecacb7dba9d1b2dd5cc4945a6ae703cc4b5c30ce3e6ba42bf"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7308b271410e5715c4db3790afa1081e0e503a48bd24b67a97842370c05ca7"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1a3d0e8b7baeda6ab05baffdc20cb47df8eeba9bffdad07081e746578faa112"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e796e9430c1d36395facf9bf38004778097949b8ded2e8d9d2755fa74741d82"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a641eedfa0c628515021ad0a4f28012b8852571043b94885610a0852ac68e24"}
{"level":"info","ts":"2026-07-07T15:18:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a478ee4a14c494fc25b6efeb6671f4f0cb032cd0a2885b6f7ae583fb0912d4e"}
{"level":"info","ts":"2026-07-07T15:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d11b86e4f5878fc5a79e07eca275862cba46709f92e34c309ee78d0f87c5bd64"}
{"level":"info","ts":"2026-07-07T15:18:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cc5a9d5f4cb5d199d96266ae1d45a33f6c287725a0e4c64140548238fbb55c1"}