{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"error","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"}
{"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"}
{"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T12:58:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"}
{"level":"debug","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"}
{"level":"info","ts":"2026-07-16T12:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"}
{"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40044","PortSpecifier":{"PortValue":40044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":895457595},"http":{"id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c979377-a4d8-456d-a21a-347c5f2e75fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35812","PortSpecifier":{"PortValue":35812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":937003732},"http":{"id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fae2c64-b6c6-4077-9e26-98777f9a2007","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40058","PortSpecifier":{"PortValue":40058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206731,"nanos":979812750},"http":{"id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:58:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"}
{"level":"debug","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:58:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6c5bffc-cd4f-4d14-b339-5bcd6f931bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40062","PortSpecifier":{"PortValue":40062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40062","PortSpecifier":{"PortValue":40062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206733,"nanos":45746532},"http":{"id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:58:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5cbeb19-2c9c-4b24-93a0-ca7f5bd81e4a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2894986a-bc18-4aa0-b14d-0de69f296da4","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:55772","PortSpecifier":{"PortValue":55772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206734,"nanos":86622346},"http":{"id":"2894986a-bc18-4aa0-b14d-0de69f296da4","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6werBI7mYlmotEfQ_3mLsQIegrNDRzOdeLeM86urgopIJdVDvfPfwKInhyRj\"}"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","subscription":"e2e-rate-iso-a-9727cb","tenant":"e2e-shared-a-989150","userId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-9727cb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9727cb"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"565ba582-b91a-4261-9ebb-e9c7e2aec035","keyName":"e2e-rate-a-9727cb","selected_subscription":"e2e-rate-iso-a-9727cb","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-9727cb@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9727cb","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:58:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2894986a-bc18-4aa0-b14d-0de69f296da4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39984","PortSpecifier":{"PortValue":39984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca2d2171-d202-4743-9357-97842fd37ad9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39984","PortSpecifier":{"PortValue":39984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":139031961},"http":{"id":"ca2d2171-d202-4743-9357-97842fd37ad9","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca2d2171-d202-4743-9357-97842fd37ad9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49640","PortSpecifier":{"PortValue":49640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":175520320},"http":{"id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7f329480-c8e0-489f-949e-735905d8970a","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"]}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/868737733026"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=b2362535-979c-4670-829d-4d896e606433"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7f329480-c8e0-489f-949e-735905d8970a","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f95ddd1b-c0eb-4339-859e-867fc8a17928","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:39998","PortSpecifier":{"PortValue":39998}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206749,"nanos":216494317},"http":{"id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eaf152d9-450f-4b87-bcee-b3ee6e322778","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40008","PortSpecifier":{"PortValue":40008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206750,"nanos":252945872},"http":{"id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daa8acb2-2b22-4c88-8412-55c3f2c1b069","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40014","PortSpecifier":{"PortValue":40014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","method":"POST","path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions","host":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:40014","PortSpecifier":{"PortValue":40014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206751,"nanos":297195782},"http":{"id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","method":"POST","headers":{":authority":"e2e-shared-a-989150.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-989150/rate-test-model-989150/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-701RHLpZ0K07xsBp_jFGjs357aGLDHVGtx7X4Tb3lqFc7tU6KjvT4MoCW0sP\"}"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","subscription":"e2e-rate-iso-a-a0440a","tenant":"e2e-shared-a-989150","userId":"c913ce78-48fc-48ef-b9d6-39962b209197","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\",\"requestedSubscription\":\"e2e-rate-iso-a-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-989150.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-989150/rate-test-model-989150\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-989150/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a0440a"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c913ce78-48fc-48ef-b9d6-39962b209197","keyName":"e2e-rate-a-a0440a","selected_subscription":"e2e-rate-iso-a-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-a-989150/e2e-rate-iso-a-a0440a@ai-tenant-e2e-shared-a-989150/rate-test-model-989150","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-989150","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a0440a","namespace":"ai-tenant-e2e-shared-a-989150","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e76ff83-67f5-4b36-b431-0197183e0b4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","method":"POST","path":"/ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75/v1/completions","host":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49654","PortSpecifier":{"PortValue":49654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784206751,"nanos":337043427},"http":{"id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","method":"POST","headers":{":authority":"e2e-shared-b-293c75.apps.cab464b2-90d4-4411-b57d-868737733026.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SpjmeQ0Nvxhlrdjr_MtXORB7Vdq6oNZsgB6M6A79yg2EE9884C2WDHKWc0Hv"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SpjmeQ0Nvxhlrdjr_MtXORB7Vdq6oNZsgB6M6A79yg2EE9884C2WDHKWc0Hv\"}"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"572bce33-dbaa-4f8c-9519-495495eb790d","keyName":"e2e-rate-b-a0440a","subscription":"e2e-rate-iso-b-a0440a","tenant":"e2e-shared-b-293c75","userId":"572bce33-dbaa-4f8c-9519-495495eb790d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\",\"requestedSubscription\":\"e2e-rate-iso-b-a0440a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-293c75.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-293c75","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0440a","namespace":"ai-tenant-e2e-shared-b-293c75","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-293c75/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a0440a"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"572bce33-dbaa-4f8c-9519-495495eb790d","keyName":"e2e-rate-b-a0440a","selected_subscription":"e2e-rate-iso-b-a0440a","selected_subscription_key":"ai-tenant-e2e-shared-b-293c75/e2e-rate-iso-b-a0440a@ai-tenant-e2e-shared-b-293c75/rate-test-model-293c75","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-293c75","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a0440a","namespace":"ai-tenant-e2e-shared-b-293c75","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T12:59:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de7c1875-fa54-4335-86e9-27b4d1c78ced","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/499b389bd072f42f566a25cf399b899309587f98b95300550ccaf3276feaaede"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a326f3761423938c364d9d5ed3fd721d52e6437cfb92a0b0fd6e53390d0f307"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43b81fdd89587d397e004da6ceae8559eb98b87f445cbefb638150bbdba663fa"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08ef2d414b3f13ab85d2611e59b099ccb4c00aa37687bb62147fe9c205e207d0"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/493a28de7cf00976aaedd4ae589b5a82dd6ecc826716e4bc85abe554ddf6f73a"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef88d69c94885bd3363a328a178be59021c5f881bc4af18654f005a95eeb12ef"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6577fb5086d12a1ff747dd8a0b8f913cca72118ca8812eb845cb00153692fbdd"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2df112c5c8d523e2930b835de1444b37c702516fe46db8ca09e225dbd6919133"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f2f19c8846d5a5c879d7975c95916b51b838ab835bbcc3309b30fccdb16e85b"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6b8fbbbbe16bfc773564cdd3fd2fcd636f1855ea96f43021c4d858364f087ed"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a6fcc1806ed1afc289951d3b49d273acca268f5334a24a7434f4c035cb60b9"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0f7a2c32003ee4797b8e5f4d1c47c159cdb2e11a30c0d9c35728cdfc8955fe6"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffe91ef483d4844f51ef2b5ae5020dfc484522c398f12ed8d6e43717b64592fb"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebbb0fb81f453fcbb9abfa66a39f61fc5145e00d02b7a162e2a0eea36eb22b4c"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77584dc9f2087f708c292a56fd8123bbfff69b0da2551d8b375514bcf8b4177e"}
{"level":"info","ts":"2026-07-16T12:59:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64ae40671aed2d8a6e0e19d038e6f5abe62c2ad6d0904c68cee4252ca73ad37d"}
{"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa3edf9a2452f2dc6c6474a2cc388b4df0dd30b943aa4ae4aa537c1c5c9a7057"}
{"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f85cab14899570ab8df82394d74221daaae10865f05583d81adc364d03c947d"}
{"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/571df01cef87129ae94535660464ee6b5358d9f807577436c4ef650edcca4936"}
{"level":"info","ts":"2026-07-16T12:59:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f801089a539f811237f035a6892e035e07e7f43fda8242fe5e60904edc0bae90"}
{"level":"info","ts":"2026-07-16T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29e2866e38c61548488dbdb9f3d9de22a4e26bd49f3b2de4ddf0491827441485"}
{"level":"info","ts":"2026-07-16T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8b3d3541287df7d016e7b317e45fb474137c06e35ddd978103bcc10fe2dab69"}
{"level":"info","ts":"2026-07-16T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ab141d56b286d72700d92bc6a7613be4c93cd39e62a661b555801b08b240644"}
{"level":"info","ts":"2026-07-16T12:59:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0224550eb5dff22dcc5e6230da59345164587695f5d177e7e19e70edc587eec6"}