{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"error","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:41:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:41:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"error","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-08T23:42:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"debug","ts":"2026-07-08T23:42:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"debug","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:42:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36736","PortSpecifier":{"PortValue":36736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36736","PortSpecifier":{"PortValue":36736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":885900566},"http":{"id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ef12b5e8-8549-4374-86d7-18ee7e270ad2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f1abd5b-9a32-4f70-b747-0848d387f649","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59450","PortSpecifier":{"PortValue":59450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":925149369},"http":{"id":"1f1abd5b-9a32-4f70-b747-0848d387f649","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f1abd5b-9a32-4f70-b747-0848d387f649","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36752","PortSpecifier":{"PortValue":36752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554133,"nanos":968990344},"http":{"id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6a980e6-79ee-4370-9bbe-bc1dc8021a3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36766","PortSpecifier":{"PortValue":36766}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554135,"nanos":28033303},"http":{"id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"367a0a38-9ac7-4054-ad82-43c4c04f247a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36770","PortSpecifier":{"PortValue":36770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36770","PortSpecifier":{"PortValue":36770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554136,"nanos":65248273},"http":{"id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9UC1Hcb6SMrGpGRR_KBkfBdGMHsn41pLyUKc8ruZnDvSjp8HabYWqMR41DhR\"}"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","subscription":"e2e-rate-iso-a-430d56","tenant":"e2e-shared-a-45d83d","userId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-430d56\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-430d56"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1b1c900e-4ea5-47f1-ab96-2385d2aa223a","keyName":"e2e-rate-a-430d56","selected_subscription":"e2e-rate-iso-a-430d56","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-430d56@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-430d56","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ec6bd7-0b48-4747-a8e0-fdce9c085ad5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34228","PortSpecifier":{"PortValue":34228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":791699590},"http":{"id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b08934d-6f88-4877-9a19-2acb1c2c23fa","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38442","PortSpecifier":{"PortValue":38442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":833712273},"http":{"id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"]}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bb0dcd2f307a"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=bc060732-2068-4968-bbfb-220d44e07ffa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4eb469ed-bde9-4b74-b02d-b674c54e5440","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54c0a58d-accc-44ed-9246-7d9a3bb759f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34234","PortSpecifier":{"PortValue":34234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34234","PortSpecifier":{"PortValue":34234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554146,"nanos":871804234},"http":{"id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8bf5fdf-b951-45da-8b20-f8e2cb048a07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34238","PortSpecifier":{"PortValue":34238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fb94616-1aab-4f59-99e9-23d320997469","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34238","PortSpecifier":{"PortValue":34238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554147,"nanos":904943632},"http":{"id":"7fb94616-1aab-4f59-99e9-23d320997469","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fb94616-1aab-4f59-99e9-23d320997469","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fb94616-1aab-4f59-99e9-23d320997469","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb94616-1aab-4f59-99e9-23d320997469","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fb94616-1aab-4f59-99e9-23d320997469","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34246","PortSpecifier":{"PortValue":34246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db4a524e-35f4-496b-9cef-709903e35f60","method":"POST","path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions","host":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34246","PortSpecifier":{"PortValue":34246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554148,"nanos":942025503},"http":{"id":"db4a524e-35f4-496b-9cef-709903e35f60","method":"POST","headers":{":authority":"e2e-shared-a-45d83d.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BCMvhOrjo7CRsHeK_7MQqxNQ2YAEDjLpmXLTbfKwhWNg9qqhEgM3UKMiWSs1\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","subscription":"e2e-rate-iso-a-bfacdf","tenant":"e2e-shared-a-45d83d","userId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\",\"requestedSubscription\":\"e2e-rate-iso-a-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-45d83d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db4a524e-35f4-496b-9cef-709903e35f60","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db4a524e-35f4-496b-9cef-709903e35f60","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dcb89e25-8a53-48d6-8fe2-8eec11506120","keyName":"e2e-rate-a-bfacdf","selected_subscription":"e2e-rate-iso-a-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-a-45d83d/e2e-rate-iso-a-bfacdf@ai-tenant-e2e-shared-a-45d83d/rate-test-model-45d83d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45d83d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bfacdf","namespace":"ai-tenant-e2e-shared-a-45d83d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4a524e-35f4-496b-9cef-709903e35f60","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db4a524e-35f4-496b-9cef-709903e35f60","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38448","PortSpecifier":{"PortValue":38448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67/v1/completions","host":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38448","PortSpecifier":{"PortValue":38448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783554148,"nanos":976086276},"http":{"id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","method":"POST","headers":{":authority":"e2e-shared-b-59ce67.apps.777d71e9-e1cc-4f0c-b4f0-bb0dcd2f307a.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NMrKs9mKo2HIv5uf_beYhGAHScKJZtDVMU0RDtCSNDks4rHS26hFwvES0qMO"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NMrKs9mKo2HIv5uf_beYhGAHScKJZtDVMU0RDtCSNDks4rHS26hFwvES0qMO\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"443989fe-4168-41b2-9916-d9f518f9d8d8","keyName":"e2e-rate-b-bfacdf","subscription":"e2e-rate-iso-b-bfacdf","tenant":"e2e-shared-b-59ce67","userId":"443989fe-4168-41b2-9916-d9f518f9d8d8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\",\"requestedSubscription\":\"e2e-rate-iso-b-bfacdf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-59ce67.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-59ce67","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bfacdf","namespace":"ai-tenant-e2e-shared-b-59ce67","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bfacdf"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"443989fe-4168-41b2-9916-d9f518f9d8d8","keyName":"e2e-rate-b-bfacdf","selected_subscription":"e2e-rate-iso-b-bfacdf","selected_subscription_key":"ai-tenant-e2e-shared-b-59ce67/e2e-rate-iso-b-bfacdf@ai-tenant-e2e-shared-b-59ce67/rate-test-model-59ce67","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-59ce67","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bfacdf","namespace":"ai-tenant-e2e-shared-b-59ce67","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-08T23:42:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc6e3b1f-7241-424b-8bc2-9ff454304c7a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e257f771226dda2f714bd1c4753c9d128d40760940241b81e650773df0fb2410"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79344b3b5baad982afdf5b9c906c6b54126700f0761d7bcd8b761253e8e5e38b"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3af6a5bc18b6abc5811db739d950e9dc17b79c1244fea243a629790b5e11e25e"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5acaa7325f7fc9c6247159f3a8542872303e03f3cdf334caa9e61e0a3d66dd71"}
{"level":"info","ts":"2026-07-08T23:42:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab0816ee41a84838e5e56d07a5fb225c1e375da70aab564c90fdfb247dde1b33"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/03a8277bbd142b81ff7ee19e8415b57002a36623527c44647e980815abf441b0"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6354968028d25ce3261593b21a10c97711e5cd3e30750401e280d7b53501895"}
{"level":"info","ts":"2026-07-08T23:42:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0887908f10bbd5a7e1ce63bd178e82dc4e33d4ae073f0c1a6c62b41618a9e85"}
{"level":"info","ts":"2026-07-08T23:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af1bb57a40ca9fdd07b53a31c88e11ac923324e0682a27f5ebd590fdec66253"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a7bca8f128f79c8e2d205111142827fad0dd7adb3307db411bb174aa2386030"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2da2ed502f2d8882e29c00092ec183e9a44473ef911abb29941d1c7ac9639680"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f0d4cf9b6a4ff9b0bfbad4bd6d6d7671a28d3f58fcfeb302c0d8c3302ca5942"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70373a653414e549cce4b69f67f8cf91f762607de4a30241b43a9f60152c3a83"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28faedaca20c95dfd7172a4930886f91a07e8de9d350a55300245d4ceb236f22"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83d0341a1ddb594dad84fd601110c1904ebb6dd778cf81b40835db208b59c17c"}
{"level":"info","ts":"2026-07-08T23:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f070afbefdb5c8b6e8a60306f10b362a815eca346f5e34b6773b5d0c29eb0e72"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1601a1d8a54caf21e35ff5c0ac3442b16c40d91274a3da32202f01268bb4e4af"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07be2283df4ace392f01165483752186898f1dca068cb3edf53b2db64dcaf20d"}
{"level":"info","ts":"2026-07-08T23:43:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a252eb011603ed6137e2af41de00be6f860e294a55f59f2ef017cfe69e6a13c0"}
{"level":"info","ts":"2026-07-08T23:43:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63ef80d805d28d2a0f989569a88e2aff2f518b4f2d1576a1a99f2cc5e9fa8598"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5882ffb4a614cb907375f0afdab27206b43e76fbd644d904687af36194dc0fad"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5bdd616101d3a7e08bfb7a69ed6c83a920fae759971353e487f783aa60ec75e"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c9d61f1b082de375e18d1f9e06bc7ba43cbef8c82c7f355f97f0838179c3723"}
{"level":"info","ts":"2026-07-08T23:43:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dde462ee0ed19ab91fea531e70d975cbbf4d37ef7b3668f9aa2b9b19f136254c"}