{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad206e36e2257bad70f360135b3f404166f67a1517e3e798321c2c45e7dec794"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8feb8a2f304a48aa869a65b05c03eaba453912d1b0297b85bab96f9f7706fb7"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ca6823c50b3f2fe62ba97bf6a00c38fe14e06ff82d75d0935f3371b6afd9fc1"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:38:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e580f19036852cb0638a677a39b65c7e6c26ae3e57940da16466c80e5bdaa2c3"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147507d9c547ec02c63e24c85c9e767042aefb0786866defbfddd36abc5b4898"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd572987ede0864b6ce4e77069040f6a6ea266526cc0ec6e8710c9bbbeb6a49a"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ab2b8e120e2294ae0a82fffd3bb118cb69412946589abc89258cc102ed0575d"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"}
{"level":"info","ts":"2026-07-07T19:38:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91326706878337bcf2def531a048905d456e2ee281af245ca43085f43e32ed23"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"error","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"info","ts":"2026-07-07T19:39:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T19:39:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"}
{"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"}
{"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"}
{"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"}
{"level":"debug","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"}
{"level":"info","ts":"2026-07-07T19:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57300","PortSpecifier":{"PortValue":57300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":315090151},"http":{"id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d6699ba7-7e38-4002-abb6-9bf8ae9f520f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37240","PortSpecifier":{"PortValue":37240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37240","PortSpecifier":{"PortValue":37240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":360158163},"http":{"id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff7f2d3c-3111-49c6-8f36-f6767b962367","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57308","PortSpecifier":{"PortValue":57308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453175,"nanos":401334021},"http":{"id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8e6b795-eba1-46ce-9659-74b59ba374b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b94effd-688e-4af2-943e-1a26ea0a6217","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453176,"nanos":463244060},"http":{"id":"4b94effd-688e-4af2-943e-1a26ea0a6217","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b94effd-688e-4af2-943e-1a26ea0a6217","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57318","PortSpecifier":{"PortValue":57318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:57318","PortSpecifier":{"PortValue":57318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453177,"nanos":501069995},"http":{"id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HIUHmauq0oLP71UN_uO2Ilx11Y1wCzlW2cmqSVqlrmeH8RTf4wlUbdCMrGgn\"}"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","subscription":"e2e-rate-iso-a-6fcc49","tenant":"e2e-shared-a-c576d2","userId":"635535af-2351-4485-a96b-d8a972dd590f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-6fcc49\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6fcc49"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"635535af-2351-4485-a96b-d8a972dd590f","keyName":"e2e-rate-a-6fcc49","selected_subscription":"e2e-rate-iso-a-6fcc49","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-6fcc49@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6fcc49","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dab702a9-af0b-4249-b019-9b5f6838c2bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39942","PortSpecifier":{"PortValue":39942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39942","PortSpecifier":{"PortValue":39942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":326823992},"http":{"id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42e03bad-a637-461c-8ae6-83ac39be7bc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44502","PortSpecifier":{"PortValue":44502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":371582875},"http":{"id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"]}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/3027b1333822"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1e6be434-acc7-4762-aa67-e4ea03d56f5e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e145d9de-ed20-4a89-b993-19aaa0aac939","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.81:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"821ce29f-1a94-424c-b6e5-35378d7dc51f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453188,"nanos":410055616},"http":{"id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28fb804f-e749-432b-8d64-83d96d5bd5a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39960","PortSpecifier":{"PortValue":39960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3367a392-9614-92d6-8c25-c5620a662e68","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39960","PortSpecifier":{"PortValue":39960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453189,"nanos":451187048},"http":{"id":"3367a392-9614-92d6-8c25-c5620a662e68","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3367a392-9614-92d6-8c25-c5620a662e68","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3367a392-9614-92d6-8c25-c5620a662e68","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3367a392-9614-92d6-8c25-c5620a662e68","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3367a392-9614-92d6-8c25-c5620a662e68","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","method":"POST","path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions","host":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51670","PortSpecifier":{"PortValue":51670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453190,"nanos":491688253},"http":{"id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","method":"POST","headers":{":authority":"e2e-shared-a-c576d2.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12CgGr896KT633sVn_n9gmEqHU6YWM3QBadPWtOrWDFllm1gnObnKcec4boGQ\"}"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","subscription":"e2e-rate-iso-a-f67255","tenant":"e2e-shared-a-c576d2","userId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\",\"requestedSubscription\":\"e2e-rate-iso-a-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-c576d2.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-f67255"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"141d00e6-b9c2-4215-88f0-95f0b62e74f1","keyName":"e2e-rate-a-f67255","selected_subscription":"e2e-rate-iso-a-f67255","selected_subscription_key":"ai-tenant-e2e-shared-a-c576d2/e2e-rate-iso-a-f67255@ai-tenant-e2e-shared-a-c576d2/rate-test-model-c576d2","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c576d2","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-f67255","namespace":"ai-tenant-e2e-shared-a-c576d2","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9488a890-c03e-4984-adb3-5fa8a93fb7e7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","method":"POST","path":"/ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1/v1/completions","host":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:35988","PortSpecifier":{"PortValue":35988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.81:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783453190,"nanos":529877820},"http":{"id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","method":"POST","headers":{":authority":"e2e-shared-b-2620f1.apps.f799b258-dabe-4b61-9af3-3027b1333822.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DOvruzZpyuDRigVf_WQV2HvAyXa1xG0AXJDBlJhpdWdhCgNm0kZ9f9BmMLfO"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DOvruzZpyuDRigVf_WQV2HvAyXa1xG0AXJDBlJhpdWdhCgNm0kZ9f9BmMLfO\"}"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1caf186c-fdac-4874-8355-a043d18b5a60","keyName":"e2e-rate-b-f67255","subscription":"e2e-rate-iso-b-f67255","tenant":"e2e-shared-b-2620f1","userId":"1caf186c-fdac-4874-8355-a043d18b5a60","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\",\"requestedSubscription\":\"e2e-rate-iso-b-f67255\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-2620f1.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2620f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f67255","namespace":"ai-tenant-e2e-shared-b-2620f1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-f67255"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1caf186c-fdac-4874-8355-a043d18b5a60","keyName":"e2e-rate-b-f67255","selected_subscription":"e2e-rate-iso-b-f67255","selected_subscription_key":"ai-tenant-e2e-shared-b-2620f1/e2e-rate-iso-b-f67255@ai-tenant-e2e-shared-b-2620f1/rate-test-model-2620f1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2620f1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-f67255","namespace":"ai-tenant-e2e-shared-b-2620f1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T19:39:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e02f841-fc77-41d9-85c2-fc4ea69ba574","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T19:39:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/252bcfc3240571539438cc7882b9811926465dcb629907a69c48ef05c1574574"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/653617618c6badc63b67b1f6657d095b7b08a4cf0e1246bf0ae18733a7d4460c"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d309f96ce2df8d71c5c6c89a0c7be8aaaf8becdf732ba0e6d5566cbaa627b0f"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb48f8b7e231575bd63ff495b1879db69850b08f7acda1ab3c21108e245fa329"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/728723fbfea30a5375bd24a5a7fc0327b2ffbfaf62552898b372d5e59af334b1"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dd799f4fe7edbd064de275f3e8e5ceda165ca5df8a96a67de77865083ec5c8f"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/750f54ef85ee7d1b2275d89de1b9df0f67af9e3a4d90358477b47c77c2412494"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bfe2e5bc92b5b98f13cf4e96c34280549c6d3c5b87a5be5acfc02df2684a337"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9700ca5dac9c00c4fa40ebe275b0974f1fe2906141f6e57859bde4bf82c8ce64"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a8d16361fb5267aa2861d093f95cccf83d8e26a95aae6d5502ff83bfbdc8bdb"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b67d44174d8d4b748cd8dba00e44f2799182cda5bb35e19b1554477b37a7f25"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b1e12cc99fdbab63e0b6092b17caae71fbf5fc215375f3f20a185b1fda5643a"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/289f8756287c333df679414ae1e5f7bcf5cd0e95e590baafd0f0e592bd81ce56"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc67ba5e3f005aa694dcadb02f6cc5ce378352a6a03a974c05977427947a17d5"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f9055adaea3b904294876c2c421cf5492693cdfa8de562ab91bbdf15cff58b3"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce7cb65f9fc6218711bfd0a1ba2570fa401766ae190edb8fa279cdd0d6af2b08"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7bc001f899db5f9f66047cabbea15a150366bde34965a941c5d2027c92e7d46"}
{"level":"info","ts":"2026-07-07T19:39:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac798ae5724ebfe6e5d2f48cf8c3098d271aaf8ee9f47c0e2c75f4f2ee171390"}
{"level":"info","ts":"2026-07-07T19:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5a18585ec34e94fa1142af5ed2c2b3a5e35b5362e89efe1c8e7da1f63c9cb36"}
{"level":"info","ts":"2026-07-07T19:40:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67ddc63ecdfb0895df10de37d43856ce454a71afb9f72c3c2f75bc889d948cef"}