{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:02:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"error","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"error","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"error","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"error","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-12T17:03:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45280","PortSpecifier":{"PortValue":45280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":186174096},"http":{"id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ded9c98-ed07-42fb-9c3b-39ae88470b72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60246","PortSpecifier":{"PortValue":60246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":244853077},"http":{"id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4b0763f-58d4-43d8-935e-15f203d1ab9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f387e19-0607-433f-be06-92bc52486f0e","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45294","PortSpecifier":{"PortValue":45294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875789,"nanos":288417766},"http":{"id":"3f387e19-0607-433f-be06-92bc52486f0e","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f387e19-0607-433f-be06-92bc52486f0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f387e19-0607-433f-be06-92bc52486f0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f387e19-0607-433f-be06-92bc52486f0e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f387e19-0607-433f-be06-92bc52486f0e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875790,"nanos":353267410},"http":{"id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bba0b0-90d4-4f71-b4e8-c31d73a30dc6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:45308","PortSpecifier":{"PortValue":45308}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875791,"nanos":393536508},"http":{"id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZjMfYaBXPpm5csU9_IfIStYmtSnYs8A87qvw55JD3aDkG6QfDgeXD971KGqg\"}"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","subscription":"e2e-rate-iso-a-ad1a0c","tenant":"e2e-shared-a-17d27e","userId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-ad1a0c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ad1a0c"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cda6f9fe-cdc8-4d28-8eff-6b94a3f1b155","keyName":"e2e-rate-a-ad1a0c","selected_subscription":"e2e-rate-iso-a-ad1a0c","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-ad1a0c@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ad1a0c","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f8c4c5c-f743-4d92-8325-8bf7860c6004","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38594","PortSpecifier":{"PortValue":38594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2928be6a-942d-4e75-ba84-18a7ceb14533","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38594","PortSpecifier":{"PortValue":38594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":533962612},"http":{"id":"2928be6a-942d-4e75-ba84-18a7ceb14533","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2928be6a-942d-4e75-ba84-18a7ceb14533","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42184","PortSpecifier":{"PortValue":42184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb6b3329-ced6-4633-b356-865b20b0e924","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42184","PortSpecifier":{"PortValue":42184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":577567878},"http":{"id":"bb6b3329-ced6-4633-b356-865b20b0e924","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3a471a63-af50-485e-8497-6203c5d354e5","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"]}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2bbc8f098c53"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=dd8475e3-e7a1-48e6-b180-67063e5b71ec"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3a471a63-af50-485e-8497-6203c5d354e5","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.33:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb6b3329-ced6-4633-b356-865b20b0e924","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38604","PortSpecifier":{"PortValue":38604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38604","PortSpecifier":{"PortValue":38604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875804,"nanos":618192168},"http":{"id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"55998cf5-4e45-4049-a13f-fcd7f95acfeb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38620","PortSpecifier":{"PortValue":38620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38620","PortSpecifier":{"PortValue":38620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875805,"nanos":680620927},"http":{"id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85ef186b-a554-4ade-ae79-8f30e3c7ab2b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38622","PortSpecifier":{"PortValue":38622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"524d2341-430d-41e8-9f13-8ec2933839cb","method":"POST","path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions","host":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:38622","PortSpecifier":{"PortValue":38622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875806,"nanos":727772451},"http":{"id":"524d2341-430d-41e8-9f13-8ec2933839cb","method":"POST","headers":{":authority":"e2e-shared-a-17d27e.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p4TxlHgtyn1OsDOK_PGGvwvFeys6Yl4wXtjZh0kNAQmdpcoXy8mMDFkxSjsP\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","subscription":"e2e-rate-iso-a-642024","tenant":"e2e-shared-a-17d27e","userId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\",\"requestedSubscription\":\"e2e-rate-iso-a-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-17d27e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-642024"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e4a98b3c-b451-4f9c-9e86-4487c369c82d","keyName":"e2e-rate-a-642024","selected_subscription":"e2e-rate-iso-a-642024","selected_subscription_key":"ai-tenant-e2e-shared-a-17d27e/e2e-rate-iso-a-642024@ai-tenant-e2e-shared-a-17d27e/rate-test-model-17d27e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-17d27e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-642024","namespace":"ai-tenant-e2e-shared-a-17d27e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"524d2341-430d-41e8-9f13-8ec2933839cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","method":"POST","path":"/ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c/v1/completions","host":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42198","PortSpecifier":{"PortValue":42198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.33:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783875806,"nanos":764111825},"http":{"id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","method":"POST","headers":{":authority":"e2e-shared-b-cc457c.apps.ad501acf-aef1-43de-ad1d-2bbc8f098c53.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2FmJRSAF0Ylk7iLr_sRw3oOm9wbKgeN7wonhAEoCrQxugJMbWytynxVbTTCe"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2FmJRSAF0Ylk7iLr_sRw3oOm9wbKgeN7wonhAEoCrQxugJMbWytynxVbTTCe\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"55c074f9-b427-4fed-9783-23b62ab0bf36","keyName":"e2e-rate-b-642024","subscription":"e2e-rate-iso-b-642024","tenant":"e2e-shared-b-cc457c","userId":"55c074f9-b427-4fed-9783-23b62ab0bf36","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\",\"requestedSubscription\":\"e2e-rate-iso-b-642024\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-cc457c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-cc457c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-642024","namespace":"ai-tenant-e2e-shared-b-cc457c","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-642024"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"55c074f9-b427-4fed-9783-23b62ab0bf36","keyName":"e2e-rate-b-642024","selected_subscription":"e2e-rate-iso-b-642024","selected_subscription_key":"ai-tenant-e2e-shared-b-cc457c/e2e-rate-iso-b-642024@ai-tenant-e2e-shared-b-cc457c/rate-test-model-cc457c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-cc457c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-642024","namespace":"ai-tenant-e2e-shared-b-cc457c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-12T17:03:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fcc84d12-2160-48f7-85a5-7b1a21317b99","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21b4063652b2b6e8273bd559b265630af813c94436c3b696fb085e2d95e554a0"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed7eb2cc166d88133af26c95c5b5bf3a78c10f192c422b1c0d5637d53be7fc0"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ab8a061b8274e7dbf77f7395c2c085093f4429ad620e32106f2f9b1fa7eecbc"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8c13dd4cef55aff21482ed92f666342ccf51fc9866e6cdccc63499736e5c9c7"}
{"level":"info","ts":"2026-07-12T17:03:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c647ed957e63cbf54bf0e6aca624f617d50d4138ec83568d56713527a136df67"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cf7c5de8e6617d6d10695630b95082dd3a9ca7c0ff2d386881f3204203cf24be"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b338ac32099368b91dd32f475c7f0bf5d57c8ba73b4f878b6634828537afd762"}
{"level":"info","ts":"2026-07-12T17:03:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c8c850e9c7afa7ac670bc24709b02d90c87fe26eb57daab49d417d5471b5280"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d921f8aba77063d1418a9ee4e75255cea811125f9a4471d9868c73d8224d73e"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6b1651cd51394c97c5005e795e059183f19f0c40a01e94fc93ecf57e40f1251"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1338eeefbd57e3a1a325cc121f9b24d31aff591ac8048978bc4e14c6dee19b3"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb71e97c9f20e5386fd2d3ca675dbba8052e2b77de0a9864d9f25ab00415953d"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea8a1160e0b7405fa77a255818c2d461717fcf5c706783747a9472d0791a8933"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae17ca9c3d067a9de65e2a23c989471a225f5bcdb0b583e97634c25a15346b59"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be49339f8069db8c0cd278b12b6cf1ee19bcbde439393e82229a56226d0c4d64"}
{"level":"info","ts":"2026-07-12T17:03:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed624a874aa7c0f294ab2a9483715be4dc1cdcad2b3c258ed32437fb1a83782"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e943e0125d86596b11aacd89865bc3d2ed7cdfff73ed42379f502f3f4c898bcd"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad434f64c9b7289ecf311bc3c1a7eccfe5074a5763f02eabad7edf9e9ef53955"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e5a55606479a9452f103cb5fb40857ac0ad805336d83bbdfec7e599c9b3e724"}
{"level":"info","ts":"2026-07-12T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/437f16a6776137cc60ba8b73365431e51c8a343382f13d887b3eab13d939f26b"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19f827e52ebc2f6643692df7e59fab6a7e7f91b386bc3aaff0b11480aa047e8b"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c71fb8a3fcb5ea40768671362679a17b840b8b2d467c46421d9681683705d454"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cde92dd7726d79f7bd551b9e7763c74ee5b8a1b8410d89a303259049c0839ec"}
{"level":"info","ts":"2026-07-12T17:04:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ad62af8d9ee34a2581185c374677188874f92016ead4bf32729c9fc9917fab3"}